RSS: MailEnable Pro/Ent/Prem Vulnerability Update

A directory traversal vulnerability in webmail for MailEnable Professional and Enterprise versions 10.57 and earlier has been identified that may allow users access to files under the MailEnable directories.

Many thanks to Markus Wulftange with CODE WHITE GmbH for discovery and reporting.

Version 10 installations should be upgraded to Version 10.58 or later.

Version 9 installations should be upgraded to Version 9.91 or later.

Version 8 installations should be upgraded to Version 8.72 or later.

MORE INFORMATION

Version 10 Premium users can download the update from: https://www.mailenable.com/download.asp.

If your version is prior to version 10, then you can download the update from: https://www.mailenable.com/downloadprevious.asp.

---