Main
Vulnerability Database
Exploits
ID:6250 - Exploit for Spoofing attack in SecurEnvoy SecurMail - CVE-2018-7702
ID:6250 - Exploit for Spoofing attack in SecurEnvoy SecurMail - CVE-2018-7702
Published: June 17, 2021
Vulnerability identifier: #VU11485
Vulnerability risk: Low
CVE-ID: CVE-2018-7702
CWE-ID: CWE-451
Exploitation vector: Remote access
Vulnerable software:
SecurEnvoy SecurMail
SecurEnvoy SecurMail
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to obtain potentially sensitive information and modify arbitrary files on the target system.
The weakness exists due to missing authentication and authorization. A remote attacker can spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and attachments by leveraging missing authentication and authorization.
The weakness exists due to missing authentication and authorization. A remote attacker can spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and attachments by leveraging missing authentication and authorization.
Remediation
Update to version 9.2.501.