CVE-2019-7212

Published: Apr 24, 2019Modified: Jun 17, 2026

8.2

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.

Affected (1)

Products: Smartertools: Smartermail

Smartertools

1 product

Smartermail

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smartertools Smartermail	From 16.0.6345 to 16.3.6985

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/

Source: cve@mitre.org

Third Party Advisory

https://www.smartertools.com/smartermail/release-notes/current

Source: cve@mitre.org

ExploitRelease NotesVendor Advisory

https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-smartermail/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.smartertools.com/smartermail/release-notes/current

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitRelease NotesVendor Advisory

Timeline

No history available yet.