PT-2024-35107
CVE-2024-52057
·
تاريخ النشر
2024-12-13
·
تاريخ التحديث
2025-10-02
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
RTI Connext Professional versions 5.2.0 through 5.3.*
RTI Connext Professional versions 6.0.0 through 6.0.*
RTI Connext Professional versions 6.1.0 through 6.1.2.17
RTI Connext Professional versions 7.0.0 through 7.3.0
Description
The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This problem affects RTI Connext Professional's Queuing Service.
Recommendations
For versions 5.2.0 through 5.3., update to a version after 5.3..
For versions 6.0.0 through 6.0., update to a version after 6.0..
For versions 6.1.0 through 6.1.2.17, update to a version after 6.1.2.17.
For versions 7.0.0 through 7.3.0, update to a version after 7.3.0.
As a temporary workaround, consider restricting access to the SQL commands to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾