SEPPmail Secure Email Gateway Subject Sanitization Bypass Vulnerability

A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.3 allows attackers to bypass subject sanitization, enabling the forgery of tags such as [signed OK]. This issue arises from inadequate handling of subject line content, which can be exploited to manipulate email metadata.

Impact

Exploitation of this vulnerability could lead to improper email tagging, potentially causing confusion or misrepresentation of the email's authenticity or status.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.