JSONP Hijacking Vulnerability in totemomail Encryption Gateway

JSONP Hijacking Vulnerability in totemomail Encryption Gateway

CVE-2018-6562 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key material via a JSONP hijacking attack.

Learn more about our User Device Pen Test.