PT-2021-1871
CVE-2021-1247
·
تاريخ النشر
2021-01-20
·
تاريخ التحديث
2021-01-27
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco Data Center Network Manager (DCNM) (affected versions not specified)
Description
The issue is related to the implementation of the REST API interface in Cisco Data Center Network Manager (DCNM), which lacks protection against SQL query structure attacks. This could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾