CVE-2018-6562 totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack.
HighCVSS 7.5
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| totemomail encryption gateway | < 6.0.0_b567 | 6.0.0_b567 |
References
- packetstormsecurity.com technical-description third-party-advisory vdb-entry
- 20180515 CSNC-2018-002 totemomail Encryption Gateway - JSONP hijacking mailing-list
- www.compass-security.com technical-description third-party-advisory