CVE-2018-6562: High severity Totemo totemomail Encryption Gateway vulnerability
Published May 18, 2018
·Updated
totemomail Encryption Gateway before 6.0b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack.
Affected Software
1 affected component
Totemo totemomail Encryption Gateway<6.0.0_b567
Event History
May 18, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6562?
CVE-2018-6562 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2018-6562?
To mitigate CVE-2018-6562, upgrade to Totemo totemomail Encryption Gateway version 6.0.0_b567 or later.
3
What kind of attack does CVE-2018-6562 involve?
CVE-2018-6562 involves a JSONP hijacking attack that allows remote attackers to access sensitive information.
4
What can attackers gain from exploiting CVE-2018-6562?
Attackers can obtain sensitive information about user sessions and encryption key material through CVE-2018-6562.
5
Is my version vulnerable to CVE-2018-6562?
Versions of Totemo totemomail Encryption Gateway before 6.0.0_b567 are vulnerable to CVE-2018-6562.