Security Advisory

CVE-2025-48046

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-29 12:33:27

Last updated 2025-09-05 08:30:09

Assigner rapid7

State PUBLISHED

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.