PT-2022-20143
CVE-2022-30496
·
Published
2022-05-27
·
Updated
2022-06-10
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IDCE MV's application version 1.0
Description
The issue allows an attacker to inject SQL payloads in the
user field of the Logon Page, potentially connecting to a database to access the enterprise's private and sensitive information.Recommendations
For IDCE MV's application version 1.0, consider restricting access to the Logon Page or disabling the
user field until a patch is available to prevent SQL injection attacks.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾