PT-2022-11762 · Safedog · Safedog Apache

Published 2022-05-10 · Updated 2022-05-17 · CVE-2021-43010

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Safedog Apache version 4.0.30255

Description The issue allows attackers to bypass the product, potentially leading to SQL injection and unauthorized access to sensitive data.

Recommendations For version 4.0.30255, update to a newer version that contains a fix for this issue, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-43010

Affected Products

Safedog Apache

References · 3

• https://osv.dev/vulnerability/CVE-2021-43010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43010 · Security Note
• https://github.com/crow821/crowsec/tree/master/bypass_safedog1025 · Note