SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys
published April 24, 2019
CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01007 · 62.7th percentile
Published
2019-04-24T14:43Z
EPSS history
Timeline
24 APR 14:43Z
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys