CVE-2021-33577

Name of the Vulnerable Software and Affected Versions Cleo LexiCom version 5.5.0.0

Description An issue allows the bypass of the requirement for the sender of an AS2 message to identify themselves via encryption and signing of the message. This can be achieved by changing the Content-Type of the message to text/plain.

Recommendations For Cleo LexiCom version 5.5.0.0, as a temporary workaround, consider restricting changes to the Content-Type of AS2 messages to prevent bypassing sender identification requirements. At the moment, there is no information about a newer version that contains a fix for this issue.