CVE-2023-27927

CVE-2023-27927

Medium · published March 27, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
28.4
In the wild
Unconfirmed
What it is

An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.4th percentile
Published
2023-03-27T19:33Z
EPSS history
Timeline
  • 27 MAR 19:33Z
    CVE-2023-27927
    cvelistv5