CVE-2024-6048: Openfind MailGates and MailAudit - OS Command Injection
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Openfind MailAudit v6.0to a version that resolves this vulnerability.Fixed in 6.0Patch 6.1.7.037 - Upgrade
Upgrade
Openfind MailGates and MailAudit v5.0to a version that resolves this vulnerability.Fixed in 5.0Patch 5.2.10.094
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6048?
CVE-2024-6048 has a high severity rating due to its potential for remote command execution by an unauthenticated attacker.
How do I fix CVE-2024-6048?
To fix CVE-2024-6048, update to the latest version of Openfind MailGates and MailAudit that includes the necessary security patches.
Who is affected by CVE-2024-6048?
CVE-2024-6048 affects users of Openfind's MailGates and MailAudit software that do not properly filter user input.
What are the potential impacts of CVE-2024-6048?
Exploitation of CVE-2024-6048 can allow attackers to inject and execute arbitrary system commands on the vulnerable server.
Is authentication required to exploit CVE-2024-6048?
No, CVE-2024-6048 can be exploited by unauthenticated remote attackers, making it particularly dangerous.