medium6.5Public exploit code
CVE-2018-7706
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities2018-03-13 · webapps · aspx
Impact
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachment action to secmail/getmessage.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securenvoy | Securmail | before 9.2.501 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html
- http://seclists.org/fulldisclosure/2018/Mar/29
- https://www.exploit-db.com/exploits/44285/
- https://www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html