Totemo totemomail read/write access vulnerability

Totemo totemomail is an email encryption solution from the Swiss company Totemo. A security vulnerability exists in Totemo totemomail version 7.0.0. The vulnerability can be exploited by a remote attacker via enumeration to read and modify mail folders...

CVE-2020-7918: Authorization Bypass Through User-Controlled Key

An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration...