CVE-2024-52057

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 5.2.0 through 5.3.* RTI Connext Professional versions 6.0.0 through 6.0.* RTI Connext Professional versions 6.1.0 through 6.1.2.17 RTI Connext Professional versions 7.0.0 through 7.3.0

Description The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This problem affects RTI Connext Professional's Queuing Service.

Recommendations For versions 5.2.0 through 5.3., update to a version after 5.3.. For versions 6.0.0 through 6.0., update to a version after 6.0.. For versions 6.1.0 through 6.1.2.17, update to a version after 6.1.2.17. For versions 7.0.0 through 7.3.0, update to a version after 7.3.0. As a temporary workaround, consider restricting access to the SQL commands to minimize the risk of exploitation.