PT-2018-17452

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1 Description The issue is related to a Cross-Site Scripting XSS problem in the WebConsole of Kaspersky Secure Mail Gateway. This allows for malicious scripts to be executed in the context of the user's...

PT-2018-17451

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1 Description The issue concerns a Local Privilege Escalation in Kaspersky Secure Mail Gateway, allowing for potential elevation of privileges. Recommendations For Kaspersky Secure Mail Gateway version...

PT-2017-3403

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1 Description The issue is related to a lack of CSRF token in web forms, insufficient protection of the web page structure, and inadequate output encoding, which can allow a remote attacker to perform a...