CVE-2024-51123

Name of the Vulnerable Software and Affected Versions Zertificon Z1 SecureMail Z1 SecureMail Gateway version 4.44.2-7240-debian12

Description The issue allows a remote attacker to obtain sensitive information through the "/compose-pdf.xhtml" component, specifically by exploiting the convid parameter. This could potentially lead to the exposure of confidential data.

Recommendations For Zertificon Z1 SecureMail Z1 SecureMail Gateway version 4.44.2-7240-debian12, consider restricting access to the "/compose-pdf.xhtml" component until a patch is available, and avoid using the convid parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.