HTTP: Micro Focus Secure Messaging Gateway enginelist.php SQL Injection
This signature detects attempts to exploit a known SQL injection vulnerability in Micro Focus Secure Messaging Gateway. It is due to insufficient validation of user-supplied input. Successful exploitation results in the execution of arbitrary SQL queries on the underlying database, allowing for the creation of an attacker controlled account with administrator privileges.
Extended Description
A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).
Affected Products
Microfocus secure_messaging_gateway
Short Name
HTTP:SQL:INJ:CVE-2018-12464-PRI
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2018-12464 CVE-2018-12465 Focus Gateway Injection Messaging Micro SQL Secure bid:45083 enginelist.php
Release Date
09/06/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3337
False Positive
Unknown
Vendors
Microfocus
CVSS Score
7.5
9.0