Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.
Configuration file injection
Exploit
CVE-2018-6289
NVD
Update to v1.1.