PT-2020-20580 · Redgate · Redgate Sql Monitor

Published 2020-02-20 · Updated 2020-02-25 · CVE-2020-9318

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Gate SQL Monitor versions 9.0.13 through 9.2.14

Description The issue allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI.

Recommendations For versions 9.0.13 through 9.2.14, update to version 9.2.15 to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-9318

Affected Products

Redgate Sql Monitor

References · 3

• https://red-gate.com/privacy-and-security/vulnerabilities/2020-02-19-sql-monitor · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9318 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9318 · Security Note