6919 Exploit | Smartermail

The attack vector exploits the fact that the SmarterMail admin panel on port 6919:

No valid credentials are required to interact with these endpoints, making it a "pre-authentication" attack. smartermail 6919 exploit

Organizations running versions below 6985 must upgrade to a newer, patched version. The attack vector exploits the fact that the

SmarterMail 16.x and all builds prior to 6985 . smartermail 6919 exploit

Place nginx, HAProxy, or IIS ARR in front of port 6919 with or OAuth Proxy . This adds a second layer of authentication independent of SmarterMail’s session.