SEPPmail Secure Email Gateway GINA Account Second-Password Bypass Vulnerability

A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.3 allows an attacker with access to a victim's GINA account to bypass a second-password verification and read protected emails. This issue arises from improper handling of authentication checks, enabling unauthorized access to sensitive email content.

Impact

Exploitation of this vulnerability could lead to unauthorized reading of protected emails by bypassing the second-password check for GINA accounts.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.