PT-2019-12798

CVE-2019-12440

Published

2019-05-29

Updated

2020-08-24

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sitecore Rocks plugin versions prior to 2.1.149

Description The issue allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.

Recommendations For versions prior to 2.1.149, update to version 2.1.149 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾