CVE-2019-7212

Description

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.

Weakness classification

• CWE-798: Use of Hard-coded Credentials

Primary references

• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Release Notes, Vendor Advisory