CVE-2024-55560

Published Dec 8, 2024 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Description
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-52809 MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00125}

epss

{'score': 0.0014}

Type Values Removed Values Added
First Time appeared Mailcleaner
Mailcleaner mailcleaner
CPEs cpe:2.3:a:mailcleaner:mailcleaner:*:*:*:*:*:*:*:*
Vendors & Products Mailcleaner
Mailcleaner mailcleaner
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation.
References
Weaknesses

No weakness.

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Dec 9, 2024, 3:58 PM
Reserved
Dec 8, 2024, 12:00 AM
Status
Deferred
Published
Dec 8, 2024, 11:15 PM
Modified
Jun 17, 2026, 8:11 AM