NetSight
high8.1

CVE-2020-35851

HGiga MailSherlock does not validate specific parameters properly.

Impact

HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.

Affected products

VendorProductAffected versions
HgigaMsr45 Isherlock-User
before 4.5-115
HgigaSsr45 Isherlock-User
before 4.5-115

Weakness classification

References