critical9.1Public exploit code
CVE-2018-7702
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities2018-03-13 · webapps · aspx
Impact
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and attachments by leveraging missing authentication and authorization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securenvoy | Securmail | before 9.2.501 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html