vulnerability
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
Critical
Summary
SEPPMail Secure E-Mail Gateway has been found to contain multiple critical vulnerabilities, including remote code execution (RCE) and unauthorized access to mail traffic. These flaws, detailed in a report by InfoGuard Labs, stem from issues like path traversal, deserialization, and eval injection, potentially allowing attackers to take complete control of the appliance and exfiltrate sensitive data. SEPPmail has released patches to address these vulnerabilities, with version 15.0.4 containing fixes for the majority.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data