« Volver al listado

CVE-2006-6964

Estado: ModificadaMedia (4)—

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Mailenable — Mailenable Professional

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6964",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-29T16:28:00.000",
  "references": [
    {
      "url": "http://securitytracker.com/id?1016337",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mailenable.com/Professional1-ReleaseNotes.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27185",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1016337",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mailenable.com/Professional1-ReleaseNotes.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27185",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source."
    },
    {
      "lang": "es",
      "value": "MailEnable Professional anterior a 1.78 proporciona una contraseña de usuario en texto claro cuando un administrador edita la configuración del usuario, lo cual permite a administradores autenticados remotamente obtener información sensible viendo el código fuente HTML."
    }
  ],
  "lastModified": "2026-06-16T22:34:08.020",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA6DCAFE-CAC2-4B36-B3E1-FA2B490424EE"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93A9222A-6F22-40BD-8411-69A90E8E46AA"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F4AADE9-F3FB-4272-8026-58FC677D3F3F"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DD53801-B8F7-4AE8-BA2B-AC6297340CB5"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.74:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9100CDEC-AD30-4CE0-9772-BF0524EDBB01"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.75:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C88089AF-34E8-40DA-9F1A-48F50C6B8A6C"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.76:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7FA2C5E-A638-485B-969E-445C7B88D1CD"
            },
            {
              "criteria": "cpe:2.3:a:mailenable:mailenable_professional:1.77:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80D3BFCC-4CF3-4FEB-844B-B6D092FCFD4E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}