Description
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.
References (3)
Core 3
Core References
Various Sources
https://www.mailcleaner.net/infobox/mc-info-box.php
Third Party Advisory
https://github.com/MailCleaner/MailCleaner/wiki/Watchdogs#host_keys
Scores
CVSS v3
9.8
EPSS
0.0057
EPSS Percentile
43.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
Status
published
Published
Dec 08, 2024
Tracked Since
Feb 18, 2026