SEPPmail Secure Email Gateway versions before 15.0.4 expose server environment variables through an unauthenticated endpoint in the new GINA UI. This allows remote actors to retrieve sensitive system information, such as configuration details or operating‑system data, that should not be publicly available. The issue is classified as CWE-497, an improper information disclosure weakness. The description does not indicate that the vulnerability grants elevated privileges or direct code execution.

The affected product is SEPPmail AG’s Secure Email Gateway in all releases prior to 15.0.4. Customers using these versions are at risk if the unauthenticated GINA UI endpoint is reachable.

The CVSS score of 6.9 classifies the severity as moderate. The EPSS score of 16% indicates a moderate probability that attackers will exploit this flaw, and the issue is not listed in CISA’s KEV catalog. The likely attack vector is remote and unauthenticated: an attacker can issue a simple HTTP request to the exposed endpoint from any network location. Once accessed, the response contains environment variables that could aid reconnaissance or facilitate subsequent attacks.