CVE-2020-12713

HIGH 7.2CVE-2020-12713 · Published 11/06/2020 · updated 17/06/2026

In short

CVE-2020-12713 is a HIGH (CVSS 7.2) vulnerability affecting gateway (ciphermail), webmail messenger (ciphermail).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gateway ciphermail	`≥ 1.0.1, ≤ 4.7.1-0`	No fix yet
webmail messenger ciphermail	`≥ 1.1.1, ≤ 3.1.1-0`	No fix yet

Description

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root account.

References

packetstormsecurity.com/files/158001/CipherMail-Community-Virtual-Appliance-4.6.2-Code-Execution.html · Exploit
ciphermail.com/blog/ciphermail-cve-2020-12713_2020-12714.html · Patch
ciphermail.com/gateway.html · Product
ciphermail.com/news.html · Release Notes
ciphermail.com/secure-webmail.html · Product
coresecurity.com/core-labs/advisories/ciphermail-multiple-vulnerabilities · Exploit

More vulnerabilities in gateway

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free