critical9.0
CVE-2020-13376
SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.
Impact
SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securenvoy | Securmail | Version 9.3.503 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sidechannel.tempestsi.com/path-traversal-vulnerability-in-securenvoy-impacts-on-remote-command-execution-through-file-upload-ec2e731bd50a
- https://www.securenvoy.com/en-gb/support
- https://sidechannel.tempestsi.com/path-traversal-vulnerability-in-securenvoy-impacts-on-remote-command-execution-through-file-upload-ec2e731bd50a
- https://www.securenvoy.com/en-gb/support