VULNERABILITY INTELLIGENCE

CVE-2023-27927

CVSS score6.5 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2023-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials.

Weakness classification

  • nvd@nist.gov: CWE-319

Primary references