CVE-2022-27544

38th percentile - higher than 38% of all known CVEs

BigFix Web Reports authorized users may see SMTP credentials in clear text. The flaw involves storing or displaying SMTP authentication data without encryption.

Authorized users may gain access to SMTP credentials, potentially allowing them to send messages on behalf of the organization or conduct further attacks. Credential leakage may lead to email security breaches and phishing.

Update BigFix Web Reports to a version containing the fix. Rotate SMTP credentials that may have been exposed and restrict report access to only necessary users.