PT-2022-10694 · Micro Focus · Micro Focus Voltage Securemail Mail Relay+1

·

CVE-2021-38130

·

Published

2022-02-03

·

Updated

2023-08-08

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Micro Focus Voltage SecureMail Mail Relay versions prior to 7.3.0.1
Description A potential information leakage issue has been identified. This could be exploited to create an information leakage attack. The issue is related to a business logic bypass in the Mail Relay component of the Voltage SecureMail Server.
Recommendations For versions prior to 7.3.0.1, update to version 7.3.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Mail Relay component to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2021-38130

Affected Products

Micro Focus Voltage Securemail Mail Relay
Voltage Securemail Server