Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN19661362/ | Third Party Advisory |
| https://www.proself.jp/information/149/ | Vendor Advisory |
| https://www.proself.jp/information/150/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Aug 2023, 16:48
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:* |
|
| CWE | CWE-78 | |
| References | (MISC) https://jvn.jp/en/jp/JVN19661362/ - Third Party Advisory | |
| References | (MISC) https://www.proself.jp/information/150/ - Vendor Advisory | |
| References | (MISC) https://www.proself.jp/information/149/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| First Time |
Northgrid
Northgrid proself |
18 Aug 2023, 12:43
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-18 10:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-39416
Mitre link : CVE-2023-39416
CVE.ORG link : CVE-2023-39416
JSON object : View
Products Affected
northgrid
- proself
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')