PT-2020-17488
CVE-2020-35851
·
Published
2020-12-31
·
Updated
2021-01-08
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
HGiga MailSherlock (affected versions not specified)
Description
The issue is related to improper validation of specific parameters, allowing attackers to launch command inject attacks remotely and execute arbitrary commands on the system. This can be exploited to gain unauthorized access and control over the system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾