Design/Logic Flaw

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the system-picked password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password...

PT-2020-10332

Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.4 Description The issue concerns the user-introduction email in MFScripts YetiShare, where the system-picked password may be leaked if the email is sent in cleartext. This means the user does not...

CVE-2019-20061: Cleartext Transmission of Sensitive Information

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the system-picked password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password...