SEPPmail Secure Email Gateway PGP Key Upload Vulnerability

A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.3 allows attackers to upload PGP keys with user IDs that do not correspond to the associated email addresses. This could potentially be exploited to manipulate PGP key verification processes or to impersonate users.

Impact

Exploitation of this vulnerability could lead to incorrect PGP key verifications, allowing for potential impersonation of users or manipulation of encrypted communications.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.