| Assigner | twcert |
| Reserved | 2024-05-27 |
| Published | 2024-05-27 |
| Updated | 2024-06-10 |
Description
Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the remote server.
| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Problem types
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Product status
Patch 55 before Patch 124
earlier before Patch 31
References
https://www.twcert.org.tw/tw/cp-132-7817-6ce29-1.html
