Security Advisory
CVE-2018-7706
6.5
MEDIUM
Vulnerability Description
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachment action to secmail/getmessage.exe.
Published Date
March 15, 2018
Official Source
NIST NVD Advisory