New MCP server — Bring vulnerability intelligence into your AI
Patrowl Intel
Back to feed

CVE-2022-37240

ExploitedNVDCIRCLENISA

EUVD-2022-39890 · Published Aug 25, 2022

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

Technologies

Altn Security Gateway For Email Servers

Weaknesses

CWE-74

CVSS scores

  • v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Execution Stealth Defense Impairment
T1190Exploit Public-Facing ApplicationT1027Obfuscated Files or InformationT1574.006Dynamic Linker HijackingT1574.007Path Interception by PATH Environment VariableT1690Prevent Command History Logging

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

Book your demo
PatrowlIntel platform screenshot