high8.1Public exploit code
CVE-2018-7705
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities2018-03-13 · webapps · aspx
Impact
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. (dot dot) in the filename parameter to secupload2/upload.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securenvoy | Securmail | before 9.2.501 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html