Description
An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.ciphermail.com/news.html ↗
- https://www.ciphermail.com/gateway.html ↗
- https://www.ciphermail.com/secure-webmail.html ↗
- http://packetstormsecurity.com/files/158001/CipherMail-Community-Virtual-Appliance-4.6.2-Code-Execution.html ↗
- https://www.ciphermail.com/blog/ciphermail-cve-2020-12713_2020-12714.html ↗
- https://www.coresecurity.com/core-labs/advisories/ciphermail-multiple-vulnerabilities ↗