CVE-2025-48046 — MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
Published: 2025-05-29 · CVSS: 5.3 · CVSS 4.0
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7