PT-2019-9573
CVE-2018-18286
·
Publicado
2019-04-25
·
Atualizado
2019-04-26
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CMG Suite versions 8.4 SP2 and earlier
Description
The issue is related to SQL injection vulnerabilities due to insufficient input validation for the
changepwd interface. This could allow an unauthenticated attacker to conduct an SQL injection attack, potentially extracting sensitive information from the database and executing arbitrary scripts.Recommendations
For CMG Suite versions 8.4 SP2 and earlier, update to a version that addresses the SQL injection vulnerabilities in the
changepwd interface to prevent exploitation.Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾