Early Access — Mondoo Vulnerability Intelligence is currently in preview.
Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries vulnerability in Finrota Netahsilat allows Retrieve Embedded Sensitive Data, Authentication Bypass, IMAP/SMTP Command Injection, Collect Data from Common Resource Locations. This issue solved in versions 1.21.10, 1.23.01, 1.23.08, 1.23.11 and 1.24.03.
Exploitability
AV:NAC:LAT:NPR:LUI:AVulnerable System
VC:HVI:LVA:LSubsequent System
SC:HSI:NSA:N8.2/CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N