SEPPmail Secure Email Gateway
cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*
- < 15.0.1
A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.1 allows for PGP signature spoofing. The issue arises because the software does not adequately verify that a PGP signature was created by the expected key.
Exploitation of this vulnerability could lead to unauthorized PGP signature validation, allowing attackers to impersonate others in email communications.
Users can update to SEPPmail Secure Email Gateway version 15.0.1 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.