SEPPmail Secure Email Gateway S/MIME Certificate Injection Vulnerability

A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.3 allows attackers to manipulate S/MIME signatures by injecting their own certificates. This could lead to unauthorized decryption of future communications with the victim.

Impact

Exploitation of this vulnerability allows for the injection of attacker-controlled certificates into S/MIME signatures, potentially leading to unauthorized decryption of encrypted communications.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.