Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities
High Nessus Plugin ID 47140
SynopsisThe remote mail server is affected by file disclosure and corruption vulnerabilities.
DescriptionAccording to its banner, the remote host is running a version of Kerio Connect (or Kerio MailServer as it was formerly known) prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to disclose potentially sensitive information and manipulate data.
SolutionUpgrade to Kerio Connect 7.0.0 or later.