Lucene search
HistoryJun 17, 2024 - 8:15 a.m.
CVE-2024-6048
openfind
mailgates
mailaudit
vulnerability
email attachment
analysis
remote attacker
system commands
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.7%
Openfind’s MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Related
cvelist
cvelist
CVE-2024-6048 Openfind MailGates and MailAudit - OS Command Injection
2024-06-17 07:28:48
cve
cve
CVE-2024-6048
2024-06-17 08:15:49
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.7%
Related for NVD:CVE-2024-6048