SmarterTools SmarterMail Local File Inclusion Vulnerability in the API Report Summary Endpoint

A local file inclusion vulnerability has been identified in SmarterTools SmarterMail builds prior to 9560. The issue resides within the '/api/v1/report/summary/{type}' API endpoint, where authenticated users can access arbitrary .json files on the system. This vulnerability can be exploited in conjunction with weak encryption algorithms and hardcoded keys, allowing attackers to decrypt and retrieve stored passwords and two-factor authentication secrets for all users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user information, including passwords and two-factor authentication secrets, potentially allowing for account takeovers.