Hardcoded Secret Keys in SmarterMail by SmarterTools

CVE-2019-7212

What is CVE-2019-7212?

SmarterTools' SmarterMail prior to build 6985 is affected by a significant security flaw involving hardcoded secret keys, which exposes user data to unauthorized access. An attacker, without authentication, can exploit this vulnerability to gain access to sensitive emails and file attachments from other users, compromising the integrity and confidentiality of user communications. Additionally, this vulnerability permits interaction with mailing lists, further increasing the risk of unauthorized information exposure. Users of affected versions are advised to implement necessary security measures promptly.

References