CVE-2018-6289: Critical severity Kaspersky Secure Mail Gateway vulnerability
Published Feb 6, 2018
·Updated
Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.
Affected Software
1 affected component
Kaspersky Secure Mail Gateway=1.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kaspersky Secure Mail Gatewayto a version that resolves this vulnerability.Fixed in 1.1
Event History
Feb 6, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Data Sourced
via NVD·03:29 PM
DescriptionSeverityWeaknessAffected Software
Jul 19, 58461
Event
06:46 PM
Frequently Asked Questions
1
What is the severity of CVE-2018-6289?
CVE-2018-6289 is considered critical due to its potential for remote code execution as root.
2
How do I fix CVE-2018-6289?
The recommended fix for CVE-2018-6289 is to update Kaspersky Secure Mail Gateway to a patched version.
3
What impact does CVE-2018-6289 have on my system?
CVE-2018-6289 allows attackers to inject configuration files, potentially leading to full system compromise.
4
Which versions of Kaspersky Secure Mail Gateway are affected by CVE-2018-6289?
CVE-2018-6289 specifically affects Kaspersky Secure Mail Gateway version 1.1.
5
What type of vulnerability is CVE-2018-6289 classified as?
CVE-2018-6289 is classified as a configuration file injection vulnerability.