PT-2013-4445
CVE-2013-3510
·
تاريخ النشر
2013-05-08
·
تاريخ التحديث
2013-05-08
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GroundWork Monitor Enterprise version 6.7.0
Description
The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote authenticated users to execute arbitrary SQL commands. The affected API endpoints include "nedi/html/System-Export.php", "nedi/html/Devices-List.php", and the "Noma" component.
Recommendations
For GroundWork Monitor Enterprise version 6.7.0, update to a version that includes a fix for the SQL injection vulnerabilities. As a temporary workaround, consider restricting access to the affected endpoints "nedi/html/System-Export.php" and "nedi/html/Devices-List.php", as well as the "Noma" component, to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾