PT-2019-13338 · Sertek · Sertek Xpare

Published 2019-07-17 · Updated 2019-07-18 · CVE-2019-13447

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sertek Xpare version 3.67

Description An issue was discovered where the login form does not sanitize input data, allowing a malicious agent to potentially access the backend database via SQL injection.

Recommendations For Sertek Xpare version 3.67, consider implementing input sanitization for the login form to prevent SQL injection attacks. As a temporary workaround, restrict access to the login form and backend database to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-13447

Affected Products

Sertek Xpare

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-13447 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13447 · Vendor Advisory
• https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day · Note