CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0)

published March 15, 2023

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01047 · 63.9th percentile
Published
2023-03-15T00:00Z
EPSS history
Timeline
  • 15 MAR 00:00Z
    An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0)
    cvelistv5