PT-2023-23879 · Veritas · Veritas Infoscale Operations Manager
CVE-2023-32569
·
Publicado
2023-05-10
·
Atualizado
2023-07-14
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Veritas InfoScale Operations Manager versions prior to 7.4.2.800
Veritas InfoScale Operations Manager versions 8.x prior to 8.0.410
Description
An issue in the InfoScale VIOM web application allows SQL Injection attacks in certain areas, enabling attackers with admin credentials to execute arbitrary SQL commands on the back-end database. This can lead to the creation, reading, updating, or deletion of sensitive data stored in the database.
Recommendations
For versions prior to 7.4.2.800, update to version 7.4.2.800 or later.
For versions 8.x prior to 8.0.410, update to version 8.0.410 or later.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Veritas Infoscale Operations Manager