PT-2017-15711
CVE-2017-3221
·
Publicado
2017-07-22
·
Atualizado
2017-10-29
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Inmarsat AmosConnect version 8
Description
The issue concerns a blind SQL injection in the login form, allowing remote attackers to access user credentials, including
username and password. This could potentially lead to unauthorized access to sensitive information.Recommendations
For Inmarsat AmosConnect version 8, update the software to a version that includes a fix for the blind SQL injection issue, or as a temporary workaround, consider restricting access to the login form to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾