| Package | Affected versions | Patched versions |
|---|---|---|
| kiteworks | < 9.5.1 | 9.5.1 |
Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where certificate-based login is enabled, potentially permitting unauthorized access to the account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free