CVE-2019-6242

** DISPUTED ** Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the vendor considers this a best-practice violation but not a vulnerability. The vendor plans to fix it at a future time.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:kentico:kentico:10.0.42:*:*:*:*:*:*:*

Information

Published : 2019-02-07 21:29

Updated : 2020-08-24 10:37


NVD link : CVE-2019-6242

Mitre link : CVE-2019-6242


JSON object : View

CWE
CWE-522

Insufficiently Protected Credentials

Advertisement

dedicated server usa

Products Affected

kentico

  • kentico