PT-2020-13504
CVE-2020-13376
·
تاريخ النشر
2020-08-07
·
تاريخ التحديث
2020-08-12
الوصف من
CVSS 3.1
9.3
حرجةالمقاييسAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SecurEnvoy SecurMail version 9.3.503
Description
The issue allows attackers to upload executable files and achieve OS command execution via a crafted
SecurEnvoyReply cookie. This enables attackers to potentially execute system commands, posing a significant security risk.Recommendations
For SecurEnvoy SecurMail version 9.3.503, consider restricting access to the
SecurEnvoyReply cookie to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾