Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-98vg-cwwq-ccc6

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

EPSS

Процентиль: 9%
0.00033
Низкий

Связанные уязвимости

nvd
почти 21 год назад

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

EPSS

Процентиль: 9%
0.00033
Низкий