PT-2018-18269 · Schneider Electric · U.Motion Builder
Publicado
2018-07-03
·
Atualizado
2018-08-28
·
CVE-2018-7772
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Schneider Electric U.motion Builder versions prior to 1.3.4
Description:
The issue exists in the processing of applets exposed on the web service. It involves a SQL injection vulnerability in the underlying SQLite database query, which checks if a user is logged in. The
loginSeed parameter is susceptible to this injection and can be embedded in the HTTP cookie of the request.Recommendations:
For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable applets to minimize the risk of exploitation. Avoid using the
loginSeed parameter in the affected HTTP cookie until the issue is resolved.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
U.Motion Builder