| Package | Affected versions | Patched versions |
|---|---|---|
| msr45 isherlock-antispam | < 4.5-130 | 4.5-130 |
| msr45 isherlock-audit | < 4.5-143 | 4.5-143 |
| msr45 isherlock-base | < 4.5-243 | 4.5-243 |
| msr45 isherlock-user | < 4.5-114 | 4.5-114 |
| msr45 isherlock-useradmin | < 4.5-122 | 4.5-122 |
| ssr45 isherlock-antispam | < 4.5-130 | 4.5-130 |
| ssr45 isherlock-audit | < 4.5-143 | 4.5-143 |
| ssr45 isherlock-base | < 4.5-243 | 4.5-243 |
| ssr45 isherlock-user | < 4.5-114 | 4.5-114 |
| ssr45 isherlock-useradmin | < 4.5-112 | 4.5-112 |
HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free