Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Vulnerable Systems:
CipherMail Community Gateway 1.0.1 through 4.7.1-0
Professional/Enterprise Gateway 1.0.1 through 4.7.1-0
CipherMail Webmail Messenger 1.1.1
CVE Information:
Disclosure Timeline:
Published Date:6/10/2020
Published on August 13th, 2020 Details HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and...
Published on August 13th, 2020 Details HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability...
Published on August 13th, 2020 Details The system does not improper check signature of specific software package, an attacker may exploit this vulnerability to load a crafted software package to the device. Vulnerable...
Beyond Security is a global leader in automated vulnerability assessment and compliance solutions.
Copyright © 2020 Beyond Security · All Rights Reserved · Privacy Policy
Mike Gutknecht, Spectrum Brands
SecuriTeam
