Description (CNA)
EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate system command or interrupt service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| EasyUse / MailHunter Ultimate | affected unspecified through 2020 |
CWE
CWE-502
References
- https://www.twcert.org.tw/tw/cp-132-6365-b056c-1.html
- https://www.chtsecurity.com/news/a381467e-74ff-4a8c-a4d3-fc86720f5400
ADP enrichment
No English description supplied.