CVE-2019-12925

Name of the Vulnerable Software and Affected Versions MailEnable Enterprise Premium version 10.23

Description The issue allows authenticated users to perform directory traversal, enabling them to add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to unauthorized access to other users' credentials, including those of SYSADMIN accounts, as well as reading other users' emails or adding emails or files to other users' accounts.

Recommendations For MailEnable Enterprise Premium version 10.23, update to a newer version that addresses the directory traversal issues to prevent unauthorized access and potential data breaches.