PT-2021-21373 · Sg Utm · Sg Utm

Published 2021-11-26 · Updated 2021-11-30 · CVE-2021-36807

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SG UTM versions prior to 9.708 MR8

Description The issue allows an authenticated user to potentially execute code via an SQL injection vulnerability in the user portal.

Recommendations For SG UTM versions prior to 9.708 MR8, update to version 9.708 MR8 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-36807

Affected Products

Sg Utm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-36807 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36807 · Vendor Advisory
• https://sophos.com/en-us/security-advisories/sophos-sa-20211126-sg-sqli · Vendor Advisory
• https://t.me/cvenotify/23796 · Telegram Post
• https://t.me/cibsecurity/32994 · Telegram Post