Vulnerabilities > CVE-2023-25267 - Out-of-bounds Write vulnerability in GFI Kerio Connect 9.4.1

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
gfi
CWE-787
NVD
Published: 2023-03-15
Updated: 2024-11-21

Summary

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.

Vulnerable Configurations

Part Description Count
Application
Gfi
1

Common Weakness Enumeration (CWE)

References