CVE-2018-6229: SQL Injection

Published Mar 15, 2018

Updated

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.

Affected Software

1 affected component

trendmicro Email Encryption Gateway=5.5

Remediation

Patch Available

https://success.trendmicro.com/solution/1119349

Event History

Mar 15, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jul 19, 58461

Event

10:40 PM

Frequently Asked Questions

What is the severity of CVE-2018-6229?

CVE-2018-6229 has been rated as a high severity vulnerability due to the potential for arbitrary code execution.

How do I fix CVE-2018-6229?

To fix CVE-2018-6229, update the Trend Micro Email Encryption Gateway to the latest patched version.

What is the impact of CVE-2018-6229?

The impact of CVE-2018-6229 includes the risk of unauthorized SQL commands being executed, potentially allowing an attacker to take over the system.

What versions are affected by CVE-2018-6229?

CVE-2018-6229 affects version 5.5 of the Trend Micro Email Encryption Gateway.

Can CVE-2018-6229 be exploited remotely?

Yes, CVE-2018-6229 can be exploited remotely if an attacker has access to the vulnerable edit policy script.