CVE-2006-6964 MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information...
MediumCVSS 4.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable professional | = 1.7 | No fix listed |
| mailenable professional | = 1.71 | No fix listed |
| mailenable professional | = 1.72 | No fix listed |
| mailenable professional | = 1.73 | No fix listed |
| mailenable professional | = 1.74 | No fix listed |
| mailenable professional | = 1.75 | No fix listed |
| mailenable professional | = 1.76 | No fix listed |
| mailenable professional | = 1.77 | No fix listed |
References
- 1016337 vdb-entry vendor-advisory
- www.mailenable.com vendor-advisory
- mailenable-listattachments-pass-disclosure(27185) vdb-entry