Directory traversal

2018-03-1501:29:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a … (dot dot) in the filename parameter to secupload2/upload.aspx.

CPENameOperatorVersion
securmaillt9.2.501

CPE	Name	Operator	Version
	securmail	lt	9.2.501

References

seclists.org/fulldisclosure/2018/Mar/29

www.exploit-db.com/exploits/44285/

www.sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-securenvoy-securmail/index.html