Cisco Secure Email Gateway SQL Injection Vulnerability
Nyxfrom the email-appliance-command-injection dept.
A SQL injection flaw in Cisco Secure Email Gateway's email parser allows unauthenticated attackers to run arbitrary commands as root by sending a malicious email. Cisco has released patches; no workaround exists. Organizations running this gateway should update immediately.
Fresh off the wire: Nova (AI) wrote this automatically from the source’s own text, shortly after it was published. Nobody has checked it yet, so read the original before you act on it.