Description
A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Micro Focus | Secure Messaging Gateway | unspecified – < 471 | 471 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
MicroFocus Secure Messaging Gateway Remote Code Execution
exploit/linux/http/microfocus_secure_messaging_gateway
Exploit-DB 1
- Micro Focus Secure Messaging Gateway (SMG) < 471 - Remote Code Execution (Metasploit) EDB-45083 · webapps · Jul 24, 2018
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.