PT-2018-2756 · Этлас · Этлас

Published

2018-12-20

·

Updated

2018-12-20

CVSS v2.0

8.0

High

VectorAV:N/AC:L/Au:S/C:C/I:P/A:P
Name of the Vulnerable Software and Affected Versions Этлас (affected versions not specified)
Description The issue is related to a lack of protection in the SQL query structure. An attacker can exploit this by entering a specially crafted SQL query in the "Название процесса" field of the process search window, potentially allowing remote access to protected information.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2019-01732

Affected Products

Этлас