| Package | Affected versions | Patched versions |
|---|---|---|
| kiteworks | < 9.5.0 | 9.5.0 |
A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured during initial configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free