PT-2018-17450 · Kaspersky · Kaspersky Secure Mail Gateway

Publicado 2018-02-01 · Atualizado 2018-02-23 · CVE-2018-6289

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1

Description The issue is related to configuration file injection, which can lead to code execution as root.

Recommendations For Kaspersky Secure Mail Gateway version 1.1, update to a version that fixes the configuration file injection issue to prevent code execution as root.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2018-6289

Produtos afetados

Kaspersky Secure Mail Gateway

Referências · 4

• 🔥 https://coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities · Exploit
• https://osv.dev/vulnerability/CVE-2018-6289 · Aviso do Fabricante
• https://support.kaspersky.com/vulnerability.aspx?el=12430#010218 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6289 · Nota de Segurança