CVE-2018-6225 XML external entity in Trend Micro Email Encryption Gateway
An authenticated attacker can exploit an XML external entity vulnerability to expose protected configuration scripts in Trend Micro Email Encryption Gateway.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-6225?
CVE-2018-6225 is a medium-severity vulnerability in Trend Micro Email Encryption Gateway, published on 15 Mar 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script.
Weakness: CWE-611
Which versions are affected by CVE-2018-6225?
It affects 1 product.
Products include Trendmicro Email Encryption Gateway.
How do I fix CVE-2018-6225?
No fix has been published for CVE-2018-6225 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6225 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-6225 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Trend Micro Email Encryption Gateway
- CVE-2018-6220 File upload in Trend Micro Email Encryption Gateway
- CVE-2018-6223 Missing authorization in Trend Micro Email Encryption Gateway
- CVE-2018-6228 SQL injection in Trend Micro Email Encryption Gateway
- CVE-2018-6229 SQL injection in Trend Micro Email Encryption Gateway
- CVE-2016-4351 SQL injection in n/a
Sources
Also known as GHSA-5pv4-g6j5-p5rv.