CVE-2024-31840
An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuratio…
Published: 2024-05-21 · CVSS: 6.5 · CVSS 3.1
An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7