| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| mailenable | ≥ 10.00, < 10.24≥ 6.0, < 6.90≥ 7.0, < 7.62≥ 8.00, < 8.64≥ 9.0, < 9.83 | 10.246.907.628.649.83 |
MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML processor to read any file on the host system. Because all credentials were stored in a cleartext file, it was possible to steal all users' credentials (including the highest privileged users).
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン