SEPPmail Secure Email Gateway S/MIME Header Injection Vulnerability

A vulnerability exists in SEPPmail Secure Email Gateway versions prior to 15.0.1, where the application fails to properly sanitize headers from S/MIME protected MIME entities. This flaw allows attackers to manipulate trusted headers.

Impact

Exploitation of this vulnerability could lead to unauthorized control over S/MIME headers, potentially allowing for malicious manipulation of email content or behavior.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.1 or later, where this vulnerability has been addressed.