CVE-2018-7706

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .

published March 14, 2018

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachment action to secmail/getmessage.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06705 · 93.9th percentile
Published
2018-03-14T20:00Z
EPSS history
Timeline
  • 14 MAR 20:00Z
    Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .
    cvelistv5