CVE-2018-6290

Description

References

• support.kaspersky.com/vulnerability.aspx · Vendor Advisory
• coresecurity.com/advisories/kaspersky-secure-mail-gateway-multiple-vulnerabilities · Exploit

secure mail gateway의 다른 취약점

• CVE-2018-6291보통 6.1WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.
• CVE-2018-6289심각 9.8Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.
• CVE-2018-6288높음 8.8Cross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail Gateway version 1.1.