CVE-2024-55196

HIGH

gophish v0.12.1 - Cleartext Storage of Sensitive Information in Mail Server Configuration

Title source: llm
STIX 2.1

Description

Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0035
EPSS Percentile 26.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
gophish/gophish 0Go
Published Dec 19, 2024
Tracked Since Feb 18, 2026