PT-2018-18223

Name of the Vulnerable Software and Affected Versions: SecurEnvoy SecurMail versions prior to 9.2.501 Description: The issue allows remote authenticated users to read arbitrary e-mail messages. This is achieved via the option1 parameter in a reply action to "secmail/getmessage.exe" API endpoint...

CVE-2018-7704: Exposure of Sensitive Information to an Unauthorized Actor

SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe...