PT-2024-19301
CVE-2024-22280
·
تاريخ النشر
2024-07-10
·
تاريخ التحديث
2024-09-04
الوصف من
CVSS 3.1
8.5
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
VMware Aria Automation versions 8.x
Description
The issue is related to a lack of correct input validation, allowing for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorized read/write operations in the database.
Recommendations
For VMware Aria Automation version 8.x, apply the available patches to address the SQL-injection vulnerability. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾