Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-55196

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.

VectorNETWORK

PublishedDec 19, 2024, 19:15

Published Bycve@mitre.org

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/gophish/gophish(Go)0N/AN/A

References

https://github.com/hexkaster/SecurityResearch/blob/main/CVE-2024-55196.md

Weakness Type

CWE-312

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK