Описание
GoPhish sends cleartext passwords
Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.
Пакеты
Наименование
github.com/gophish/gophish
go
Затронутые версииВерсия исправления
<= 0.12.1
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
около 1 года назад
Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.