Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Can Doğu

#38563de 53,638
7.2CVSS total
Vulnerabilidades · 1
PT-2023-26536
7.2
2023-08-11
Snow · Software License Manager · CVE-2023-3864
**Name of the Vulnerable Software and Affected Versions** Snow Software license manager versions 8.0.0 through 9.30.1 **Description** The issue is related to a blind SQL injection in a service running in the Snow Software license manager. This allows a logged-in user with high privileges to inject SQL commands via the web portal. **Recommendations** For versions 8.0.0 through 9.30.1, consider restricting access to the web portal to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.