CVEvulnerability
CVE-2019-7212
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-798
Description
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
Affected configurations
• smartertools smartermail (>= 16.0.6345 < 16.3.6985)
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/ Third Party Advisory
- https://www.smartertools.com/smartermail/release-notes/current Exploit, Release Notes, Vendor Advisory
- https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/ Third Party Advisory
- https://www.smartertools.com/smartermail/release-notes/current Exploit, Release Notes, Vendor Advisory