CVE-2019-7212 - SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys

Back Back to CVE browser

HIGH

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys

Published Apr 24, 2019

8.2

HIGH

CVSS 3.0

EPSS 1.01%

Description

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/
x_refsource_MISCThird Party Advisory
https://www.smartertools.com/smartermail/release-notes/current
x_refsource_CONFIRMExploitRelease NotesVendor Advisory

Link	Providers	Tags
https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/		x_refsource_MISCThird Party Advisory
https://www.smartertools.com/smartermail/release-notes/current		x_refsource_CONFIRMExploitRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 24, 2019

Updated Aug 4, 2024

Reserved Jan 29, 2019

Link CVE-2019-7212

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-7212

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-7212