CVE:CVE-2020-25848
CNNVD:CNNVD-202012-1967
Hgiga MailSherlock是中国恒基（Hgiga）公司的一套企业邮件审核系统。
HGiga MailSherlock 存在安全漏洞，攻击者可利用该漏洞通过默认密码生成机制远程授予特权。
solution:Upgrade hgiga msr45_isherlock-antispam to a higher version than 4.5-130,and avoid the version (,4.5-130); Upgrade hgiga msr45_isherlock-audit to a higher version than 4.5-143,and avoid the version (,4.5-143); Upgrade hgiga msr45_isherlock-base to a higher version than 4.5-243,and avoid the version (,4.5-243); Upgrade hgiga msr45_isherlock-user to a higher version than 4.5-114,and avoid the version (,4.5-114); Upgrade hgiga msr45_isherlock-useradmin to a higher version than 4.5-122,and avoid the version (,4.5-122); Upgrade hgiga ssr45_isherlock-antispam to a higher version than 4.5-130,and avoid the version (,4.5-130); Upgrade hgiga ssr45_isherlock-audit to a higher version than 4.5-143,and avoid the version (,4.5-143); Upgrade hgiga ssr45_isherlock-base to a higher version than 4.5-243,and avoid the version (,4.5-243); Upgrade hgiga ssr45_isherlock-user to a higher version than 4.5-114,and avoid the version (,4.5-114); Upgrade hgiga ssr45_isherlock-useradmin to a higher version than 4.5-112,and avoid the version (,4.5-112)