Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Vulnerable Systems:
CipherMail Community Gateway 1.0.1 through 4.7.1-0
Professional/Enterprise Gateway 1.0.1 through 4.7.1-0
CipherMail Webmail Messenger 1.1.1
CVE Information:
Disclosure Timeline:
Published Date:6/10/2020
Black box fuzzing during application development is absolutely crucial for key industries.
With beSECURE, you will spend less time chasing vulnerabilities that don’t exist, less time maintaining your VA fixes. From the moment of my first contact with Beyond Security, I have been impressed and enjoyed their...
Beyond Security by Fortra are actively monitoring the disclosure of a security issue related affecting a widely used Java Framework called “Spring4Shell” or “SpringShell” which has been assigned CVE-2022-22965.
Copyright © Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners. Privacy Policy
SecuriTeam
Beyond Security
