Описание
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs.
Ссылки
- ExploitPatchThird Party Advisory
- PatchRelease NotesThird Party Advisory
- ExploitPatchThird Party Advisory
- PatchRelease NotesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2022-05d (исключая)
cpe:2.3:a:mailcow:mailcow\:_dockerized:*:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.22742
Средний
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs.
EPSS
Процентиль: 96%
0.22742
Средний
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78