Test ID:	1.3.6.1.4.1.25623.1.0.103750
Category:	Web application abuses
Title:	IceWarp Web Mail <= 10.4.5 Information Disclosure Vulnerability - Active Check
Summary:	IceWarp Web Mail is prone to an information disclosure; vulnerability.
Description:	Summary: IceWarp Web Mail is prone to an information disclosure vulnerability. Vulnerability Insight: The used XML parser is resolving external XML entities which allows attackers to read files and send requests to systems on the internal network (e.g port scanning). The risk of this vulnerability is highly increased by the fact that it can be exploited by anonymous users without existing user accounts. Vulnerability Impact: Attackers can exploit these issues to gain access to potentially sensitive information. Affected Software/OS: IceWarp Mail Server version 10.4.5 and prior. Solution: Update to the latest version. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:C/A:P
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.