PT-2020-14864

CVE-2020-16277

·

Published

2020-08-10

·

Updated

2020-08-11

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20
Description The issue is related to an SQL injection vulnerability in the Analytics component. This vulnerability allows a remote, authenticated attacker to gain unauthorized access to the database.
Recommendations For versions 8.0 through 9.8.20, update to a version that contains a fix for this issue to prevent unauthorized database access.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2020-16277
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com