{ "id": "CVE-2024-5143", "sourceIdentifier": "hp-security-alert@hp.com", "published": "2024-05-23T17:15:31.560", "lastModified": "2024-05-24T01:15:30.977", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server credentials. By redirecting send-to-email traffic to the new server, the original SMTP server credentials may potentially be exposed." }, { "lang": "es", "value": "Un usuario con privilegios administrativos del dispositivo puede cambiar la configuraci\u00f3n del servidor SMTP existente en el dispositivo, sin tener que volver a ingresar las credenciales del servidor SMTP. Al redirigir el tr\u00e1fico de env\u00edo a correo electr\u00f3nico al nuevo servidor, es posible que las credenciales originales del servidor SMTP queden expuestas." } ], "metrics": {}, "references": [ { "url": "https://support.hp.com/us-en/document/ish_10643804-10643841-16/HPSBPI03941", "source": "hp-security-alert@hp.com" } ] }