CVE-2018-6288: CSRF
Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kaspersky Secure Mail Gatewayto a version that resolves this vulnerability.Fixed in 1.1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6288?
CVE-2018-6288 is classified as a high severity vulnerability due to the potential for administrative account takeover.
How do I fix CVE-2018-6288?
The recommended fix for CVE-2018-6288 is to apply the latest security patches provided by Kaspersky for Secure Mail Gateway version 1.1.
What type of attack does CVE-2018-6288 enable?
CVE-2018-6288 enables a Cross-site Request Forgery (CSRF) attack, allowing unauthorized actions to be performed by an attacker.
Which version of Kaspersky Secure Mail Gateway is affected by CVE-2018-6288?
Kaspersky Secure Mail Gateway version 1.1 is the only version affected by CVE-2018-6288.
What are the implications of exploiting CVE-2018-6288?
Exploiting CVE-2018-6288 can lead to unauthorized administrative access, potentially compromising sensitive email communications.