| Package | Affected versions | Patched versions |
|---|---|---|
| hmailserver | = 5.6.9= 5.8.6 |
Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free