CVE-2006-6964

Опубликовано: 29 янв. 2007

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

Ссылки

http://securitytracker.com/id?1016337
Vendor Advisory
http://www.mailenable.com/Professional1-ReleaseNotes.txt
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27185
http://securitytracker.com/id?1016337
Vendor Advisory
http://www.mailenable.com/Professional1-ReleaseNotes.txt
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27185

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.74:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.75:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.76:*:*:*:*:*:*:*

cpe:2.3:a:mailenable:mailenable_professional:1.77:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00151

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-54wp-7535-r37v

github

почти 4 года назад