PT-2019-9373 · Cimtechniques · Cimscan

Publicado 2019-01-10 · Atualizado 2020-01-16 · CVE-2018-16803

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CIMTechniques CIMScan versions 6.x through 6.2

Description The issue in CIMTechniques CIMScan allows attackers to execute SQL code through the SOAP WSDL parser.

Recommendations For versions 6.x through 6.2, update to a version that includes a fix for this issue, as using the current version may allow attackers to execute SQL code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-16803

Produtos afetados

Cimscan

Referências · 5

• https://twitter.com/DC3VDP/status/1083359509995753473 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-16803 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-16803 · Aviso do Fabricante
• https://linkedin.com/feed/update/urn:li:activity:6489145511902212096 · Nota
• https://websec.nl/news.php · Nota