PT-2020-16245 · Hgiga · Hgiga Mailsherlock

Dio Lin + 1 · Published 2020-12-31 · Updated 2021-01-08 · CVE-2020-25850

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HGiga MailSherlock (affected versions not specified)

Description The issue concerns the function that views the source code in HGiga MailSherlock, which fails to validate specific characters. This flaw allows remote attackers to download arbitrary system files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-25850

Affected Products

Hgiga Mailsherlock

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-25850 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25850 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-4258-0a8a0-1.html · Note
• https://t.me/cvenotify/8322 · Telegram Post