critical9.8
CVE-2020-25848
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
Impact
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Msr45 Isherlock-Antispam | before 4.5-130 |
| Hgiga | Msr45 Isherlock-Audit | before 4.5-143 |
| Hgiga | Msr45 Isherlock-Base | before 4.5-243 |
| Hgiga | Msr45 Isherlock-User | before 4.5-114 |
| Hgiga | Msr45 Isherlock-Useradmin | before 4.5-122 |
| Hgiga | Ssr45 Isherlock-Antispam | before 4.5-130 |
| Hgiga | Ssr45 Isherlock-Audit | before 4.5-143 |
| Hgiga | Ssr45 Isherlock-Base | before 4.5-243 |
| Hgiga | Ssr45 Isherlock-User | before 4.5-114 |
| Hgiga | Ssr45 Isherlock-Useradmin | before 4.5-112 |