Vulnerability Details CVE-2019-20061
The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-20061
-
cpe:2.3:a:mfscripts:yetishare:3.11
-
cpe:2.3:a:mfscripts:yetishare:3.5.2
-
cpe:2.3:a:mfscripts:yetishare:3.5.3
-
cpe:2.3:a:mfscripts:yetishare:4.0
-
cpe:2.3:a:mfscripts:yetishare:4.0.1
-
cpe:2.3:a:mfscripts:yetishare:4.1
-
cpe:2.3:a:mfscripts:yetishare:4.1.1
-
cpe:2.3:a:mfscripts:yetishare:4.2
-
cpe:2.3:a:mfscripts:yetishare:4.3
-
cpe:2.3:a:mfscripts:yetishare:4.4
-
cpe:2.3:a:mfscripts:yetishare:4.4.1
-
cpe:2.3:a:mfscripts:yetishare:4.5
-
cpe:2.3:a:mfscripts:yetishare:4.5.1
-
cpe:2.3:a:mfscripts:yetishare:4.5.2
-
cpe:2.3:a:mfscripts:yetishare:4.5.3
-
cpe:2.3:a:mfscripts:yetishare:4.5.4