Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Vulnerable Systems:
CipherMail Community Gateway 1.0.1 through 4.7.1-0
Professional/Enterprise Gateway 1.0.1 through 4.7.1-0
CipherMail Webmail Messenger 1.1.1
CVE Information:
Disclosure Timeline:
Published Date:6/10/2020
Published on August 1st, 2020 Summary An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below. Credit: The information has been provided by Lasse Trolle Borup The original article can be...
Published on August 1st, 2020 Summary IP-in-IP encapsulation is a tunneling protocol specified in RFC 2003 that allows for IP packets to be encapsulated inside another IP packets. This is very similar to IPSEC VPNs in...
Published on August 1st, 2020 Summary A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its...
Beyond Security is a global leader in automated vulnerability assessment and compliance solutions.
Copyright © 2020 Beyond Security · All Rights Reserved · Privacy Policy
Mike Gutknecht, Spectrum Brands
SecuriTeam
