SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor.
This website uses analytics to understand how it is used and to keep improving it. Collection is on by default: you can object to it here, or allow it again later.
