MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
References
Link | Resource |
---|---|
https://files.mdaemon.com/securitygateway/release/relnotes_en.htm | Vendor Advisory |
https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-format-parameter.pdf | Exploit Third Party Advisory |
https://files.mdaemon.com/securitygateway/release/relnotes_en.htm | Vendor Advisory |
https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-format-parameter.pdf | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:14
Type | Values Removed | Values Added |
---|---|---|
References | () https://files.mdaemon.com/securitygateway/release/relnotes_en.htm - Vendor Advisory | |
References | () https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-format-parameter.pdf - Exploit, Third Party Advisory |
08 Aug 2023, 14:21
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-74 |
Information
Published : 2022-08-25 15:15
Updated : 2024-11-21 07:14
NVD link : CVE-2022-37240
Mitre link : CVE-2022-37240
CVE.ORG link : CVE-2022-37240
JSON object : View
Products Affected
altn
- security_gateway_for_email_servers
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')