PT-2017-15711
CVE-2017-3221
·
Published
2017-07-22
·
Updated
2017-10-29
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Inmarsat AmosConnect version 8
Description
The issue concerns a blind SQL injection in the login form, allowing remote attackers to access user credentials, including
username and password. This could potentially lead to unauthorized access to sensitive information.Recommendations
For Inmarsat AmosConnect version 8, update the software to a version that includes a fix for the blind SQL injection issue, or as a temporary workaround, consider restricting access to the login form to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾