PT-2020-17488 · Hgiga · Mailsherlock

Dio Lin + 1 · Published 2020-12-31 · Updated 2021-01-08 · CVE-2020-35851

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HGiga MailSherlock (affected versions not specified)

Description The issue is related to improper validation of specific parameters, allowing attackers to launch command inject attacks remotely and execute arbitrary commands on the system. This can be exploited to gain unauthorized access and control over the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-35851

Affected Products

Mailsherlock

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-35851 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35851 · Vendor Advisory
• https://t.me/cvenotify/8302 · Telegram Post
• https://t.me/cibsecurity/21465 · Telegram Post
• https://twcert.org.tw/en/cp-139-4264-f10f4-2.html · Note