CVE-2020-11852

2020-08-0715:53:57

microfocus

www.cve.org

8.5 High

AI Score

Confidence

High

0.547 Medium

EPSS

Percentile

97.7%

JSON

DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM system command.

CNA Affected

[
  {
    "product": "Secure Messaging Gateway ( SMG).",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All SMG versions prior to July 2020 version."
      }
    ]
  }
]

References

support.microfocus.com/kb/doc.php?id=7024775