Coremail Config Disclosure

This indicates an attempt to exploit an Information Disclosure Vulnerability in Coremail Mail System. The vulnerability is caused by the application’s poor sanitization of user-supplied inputs. An attacker could take advantage of this flaw to obtain sensitive data from the vulnerable system.Affected products include Coremail XT 3.0.1 to 5.0.9.

Mitigation / Precaution

In order to patch this vulnerability, please install the official patch the vendor made available for supported, vulnerable instances.

Written by

Jijith Rajan

Cyber Security Engineer