Lucene search
TwcertCVE-2024-6048HistoryJun 17, 2024 - 8:15 a.m.
CVE-2024-6048
2024-06-1708:15:49
CWE-78
twcert
web.nvd.nist.gov
29
cve-2024-6048
openfind
mailgates
mailaudit
command injection
remote attacker
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
Openfind’s MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MailGates 5.0",
"vendor": "Openfind",
"versions": [
{
"lessThan": "Patch 5.2.10.094",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MailAudit 5.0",
"vendor": "Openfind",
"versions": [
{
"lessThan": "Patch 5.2.10.094",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MailGates 6.0",
"vendor": "Openfind",
"versions": [
{
"lessThan": "Patch 6.1.7.037",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MailAudit 6.0",
"vendor": "Openfind",
"versions": [
{
"lessThan": "Patch 6.1.7.037",
"status": "affected",
"version": "earlier",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-6048 Openfind MailGates and MailAudit - OS Command Injection
2024-06-17 07:28:48
nvd
nvd
CVE-2024-6048
2024-06-17 08:15:49
cvelist
cvelist
CVE-2024-6048 Openfind MailGates and MailAudit - OS Command Injection
2024-06-17 07:28:48
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
Related for CVE-2024-6048