TVN ID	TVN-202011001
CVE ID	CVE-2020-25848
CVSS	9.8(Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	MailSherlock MSR45/SSR45 Module: iSherlock-base-4.5 < 243 iSherlock-user-4.5 < 114 iSherlock-useradmin-4.5 < 122 iSherlock-audit-4.5 < 143 iSherlock-antispam-4.5 < 130
Description	HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.
Solution	Update MailSherlock MSR45/SSR45 Module to: iSherlock-base-4.5-243.i386.rpm iSherlock-user-4.5-114.i386.rpm iSherlock-useradmin-4.5-122.i386.rpm iSherlock-audit-4.5-143.i386.rpm iSherlock-antispam-4.5-130.i386.rpm
Credit	Robin Tung (CHT)、Dio Lin (CHT)
Public Date	2020-12-30