Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper
A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.
Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper
Type: text
CWE ID: N/A
Description: Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper
Metrics
Version
Base score
Base severity
Vector
3.1
7.6
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H
Version:3.1
Base score:7.6
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
FIX: Hotfix 9 will be published to fix this vulnerability. Download and instructions available at: https://www.f-secure.com/en/business/downloads/internet-gatekeeper