Vulnerability Details CVE-2020-12713
An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.033
EPSS Ranking 86.7%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
References
- http://packetstormsecurity.com/files/158001/CipherMail-Community-Virtual-Appliance-4.6.2-Code-Execution.html
- https://www.ciphermail.com/blog/ciphermail-cve-2020-12713_2020-12714.html
- https://www.ciphermail.com/gateway.html
- https://www.ciphermail.com/news.html
- https://www.ciphermail.com/secure-webmail.html
- https://www.coresecurity.com/core-labs/advisories/ciphermail-multiple-vulnerabilities
- http://packetstormsecurity.com/files/158001/CipherMail-Community-Virtual-Appliance-4.6.2-Code-Execution.html
- https://www.ciphermail.com/blog/ciphermail-cve-2020-12713_2020-12714.html
- https://www.ciphermail.com/gateway.html
- https://www.ciphermail.com/news.html
- https://www.ciphermail.com/secure-webmail.html
- https://www.coresecurity.com/core-labs/advisories/ciphermail-multiple-vulnerabilities
Products affected by CVE-2020-12713
-
cpe:2.3:a:ciphermail:gateway:1.0.1
-
cpe:2.3:a:ciphermail:gateway:4.7.1-0
-
cpe:2.3:a:ciphermail:webmail_messenger:1.1.1
-
cpe:2.3:a:ciphermail:webmail_messenger:3.1.1-0