ZeroHour

CVE-2020-12713

PoC ×2
CVSS 3.1
7.2 high
EPSS
3%p85
Published
()
Modified
Description

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.

Vendors
ciphermail
Products
gateway, webmail messenger
Weakness
CWE-269
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.