← CVE Intelligence

CVE-2024-4297

HGiga iSherlock - Arbitrary File Download PUBLISHED

Description (CNA)

The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability to download arbitrary system files.

Affected (CNA)

Vendor / productVersions
HGiga / iSherlock 4.5affected earlier before 147
HGiga / iSherlock 5.5affected earlier before 147

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.