Description
SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEPPmail | SEPPmail Secure Email Gateway & SEPPmail Cloud | — | 15.0.4.2 |