PT-2017-15711

CVE-2017-3221

·

Published

2017-07-22

·

Updated

2017-10-29

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Inmarsat AmosConnect version 8
Description The issue concerns a blind SQL injection in the login form, allowing remote attackers to access user credentials, including username and password. This could potentially lead to unauthorized access to sensitive information.
Recommendations For Inmarsat AmosConnect version 8, update the software to a version that includes a fix for the blind SQL injection issue, or as a temporary workaround, consider restricting access to the login form to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾