PT-2019-9373 · Cimtechniques · Cimscan

Published 2019-01-10 · Updated 2020-01-16 · CVE-2018-16803

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CIMTechniques CIMScan versions 6.x through 6.2

Description The issue in CIMTechniques CIMScan allows attackers to execute SQL code through the SOAP WSDL parser.

Recommendations For versions 6.x through 6.2, update to a version that includes a fix for this issue, as using the current version may allow attackers to execute SQL code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-16803

Affected Products

Cimscan

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-16803 · Security Note
• https://osv.dev/vulnerability/CVE-2018-16803 · Vendor Advisory
• https://twitter.com/DC3VDP/status/1083359509995753473 · Note
• https://linkedin.com/feed/update/urn:li:activity:6489145511902212096 · Note
• https://websec.nl/news.php · Note