HGiga iSherlock OS Command Injection Vulnerability

A command injection vulnerability has been identified in HGiga's iSherlock application, specifically in versions 4.5 and 5.5, including the MailSherlock, SpamSherlock, and AuditSherlock components. This vulnerability allows unauthenticated local attackers to inject and execute arbitrary operating system commands on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the server, potentially allowing attackers to manipulate the system or access sensitive information.

Remediation

Users can update the iSherlock application to version 476 or later for the base and audit packages in both the 4.5 and 5.5 versions.