Beveiligingsadvies

CVE-2012-10046

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-08 18:11:08

Laatst bijgewerkt 2026-04-07 14:02:41

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and results in full command execution on the underlying system.

← Alle CVE's bekijken Bekijk op cve.org ↗