SEPPmail Secure Email Gateway PGP Signature Verification Vulnerability

A vulnerability exists in SEPPmail Secure Email Gateway versions prior to 15.0.1, where the application fails to accurately convey the results of PGP signature verification. This oversight prevents users from identifying forged emails.

Impact

The vulnerability could lead to users unknowingly accepting forged emails, as they cannot rely on the PGP signature verification process to detect fakes.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.1 or later, where this vulnerability has been addressed.