ID:6248 - Exploit for Improper authorization in SecurEnvoy SecurMail - CVE-2018-7704

 
Main Vulnerability Database Exploits ID:6248 - Exploit for Improper authorization in SecurEnvoy SecurMail - CVE-2018-7704

ID:6248 - Exploit for Improper authorization in SecurEnvoy SecurMail - CVE-2018-7704

Published: June 17, 2021


Vulnerability identifier: #VU11484
Vulnerability risk: Low
CVE-ID: CVE-2018-7704
CWE-ID: CWE-285
Exploitation vector: Remote access
Vulnerable software:
SecurEnvoy SecurMail

Link to public exploit:


Vulnerability description

The vulnerability allows a remote authenticated attacker to obtain potentially sensitive information on the target system.

The weakness exists due to only partially implemented authorization checks. A remote attacker can gain access to potentially sensitive information.

Remediation

Update to version 9.2.501.