CVE-2022-24236

Description

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts.

Affected Platforms

Weakness Type

CWE-732

References

• https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.h…
• https://www.snapt.net/platforms/aria-adc
• https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.h…
• https://www.snapt.net/platforms/aria-adc