PT-2023-23879 · Veritas · Veritas Infoscale Operations Manager

CVE-2023-32569

·

Publicado

2023-05-10

·

Atualizado

2023-07-14

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Veritas InfoScale Operations Manager versions prior to 7.4.2.800 Veritas InfoScale Operations Manager versions 8.x prior to 8.0.410
Description An issue in the InfoScale VIOM web application allows SQL Injection attacks in certain areas, enabling attackers with admin credentials to execute arbitrary SQL commands on the back-end database. This can lead to the creation, reading, updating, or deletion of sensitive data stored in the database.
Recommendations For versions prior to 7.4.2.800, update to version 7.4.2.800 or later. For versions 8.x prior to 8.0.410, update to version 8.0.410 or later.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-32569

Produtos afetados

Veritas Infoscale Operations Manager