Znuny S/MIME Email Decryption Vulnerability in Communication Log Access

A vulnerability exists in Znuny versions 6.5.1 prior to 6.5.11, 7.0.1 prior to 7.1.3, and Znuny LTS 6.0. This issue allows users with access to the Communication Log to view the decrypted content of S/MIME encrypted emails, even if they do not have access to the corresponding tickets.

Impact

The vulnerability could lead to unauthorized access to sensitive information contained in S/MIME encrypted emails, allowing users to read decrypted email content that should be protected.