CVE-2019-9883
Published Jun 3, 2019
Last updated 5 years ago
Overview
- Description
- Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes.
- Source
- twcert@cert.org.tw
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hgiga:msr35_isherlock-base:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81551260-B53B-4483-BCDA-AB809229332F",
"versionEndExcluding": "1.5.328"
},
{
"criteria": "cpe:2.3:a:hgiga:msr35_isherlock-sysinfo:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C84F8EE8-BCFB-42AB-A5C0-00387A3924E1",
"versionEndExcluding": "1.5.196"
},
{
"criteria": "cpe:2.3:a:hgiga:msr35_isherlock-user:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2128B45-5C84-465F-8192-5F3D50FB3150",
"versionEndExcluding": "1.5.127"
},
{
"criteria": "cpe:2.3:a:hgiga:msr35_isherlock-useradmin:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50A82BFA-3267-4EF8-963E-4C43BB59EC6C",
"versionEndExcluding": "1.5.239"
},
{
"criteria": "cpe:2.3:a:hgiga:msr45_isherlock-base:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E89BBA97-54CF-409A-87C3-3D7811073950",
"versionEndExcluding": "4.5-206"
},
{
"criteria": "cpe:2.3:a:hgiga:msr45_isherlock-sysinfo:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F146CEE7-D66B-45A4-BC83-9CDF937F0D75",
"versionEndExcluding": "4.5-109"
},
{
"criteria": "cpe:2.3:a:hgiga:msr45_isherlock-user:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FA7AA60-C9DE-4A6C-BB99-27E8E1E239F3",
"versionEndExcluding": "4.5-81"
},
{
"criteria": "cpe:2.3:a:hgiga:msr45_isherlock-useradmin:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1826C46-146C-423A-8AA7-E553FCB1F11D",
"versionEndExcluding": "4.5-106"
}
],
"operator": "OR"
}
]
}
]