Approved changes feed: RSS · Atom

cpe:2.3:a:gfi:kerio_connect:9.4.1:patch1:*:*:*:*:*:*

part: a version: 9.4.1 update: patch1

VendorGfi (cd394833-109c-5606-a2f3-854a54717243)
ProductKerio Connect (7dc1ffc3-4f32-5082-a2f6-f86df6b60e49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25267 vulnerable 2026-06-03 14:49:32.419581 Details available
An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.
Published: 2023-03-15T00:00:00.000Z
Updated: 2025-02-27T14:34:14.493Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.