CVE-2020-12713

Name of the Vulnerable Software and Affected Versions CipherMail Community Gateway and Professional/Enterprise Gateway versions 1.0.1 through 4.7.1-0 CipherMail Webmail Messenger versions 1.1.1 through 3.1.1-0

Description An issue was discovered that allows attackers with administrative access to the web interface to escalate their privileges to the Unix root account. This is possible due to multiple options available to attackers.

Recommendations For CipherMail Community Gateway and Professional/Enterprise Gateway versions 1.0.1 through 4.7.1-0, update to a version outside of this range to mitigate the risk. For CipherMail Webmail Messenger versions 1.1.1 through 3.1.1-0, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting administrative access to the web interface until a patch is available.