title: Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate
description: Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE parameter.
problem types: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
affected:
{
defaultStatus: affected
product: MailHunter Ultimate
vendor: EasyUse Digital Technology
versions:
lessThanOrEqual: 2023, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL