PT-2018-18225

Name of the Vulnerable Software and Affected Versions: SecurEnvoy SecurMail versions prior to 9.2.501 Description: The issue allows remote authenticated users to read arbitrary e-mail messages. This is achieved by using a .. dot dot in the option2 parameter in an attachment action to...

CVE-2018-7706: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. dot dot in the option2 parameter in an attachment action to secmail/getmessage.exe...