PT-2021-21860
CVE-2021-37749
·
تاريخ النشر
2021-08-30
·
تاريخ التحديث
2021-09-01
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Hexagon GeoMedia WebMap 2020 versions prior to 16.6.2.66
Description:
The issue allows blind SQL Injection via the
Id parameter within sourceItems to the GetMap method. This can be exploited through the MapService.svc endpoint.Recommendations:
For Hexagon GeoMedia WebMap 2020 versions prior to 16.6.2.66, update to version 16.6.2.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the
GetMap method or disabling the Id parameter within sourceItems to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾