PT-2022-13129 · Capsule8 · Capsule8 Console

Published 2022-02-02 · Updated 2023-08-08 · CVE-2022-0366

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Capsule8 Console versions 4.6.0 through 4.9.1

Description The issue allows an authenticated and authorized agent user to potentially gain administrative access via an SQL injection vulnerability.

Recommendations For Capsule8 Console versions 4.6.0 through 4.9.1, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-0366

Affected Products

Capsule8 Console

References · 4

• https://osv.dev/vulnerability/CVE-2022-0366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0366 · Security Note
• https://t.me/cibsecurity/36690 · Telegram Post
• https://sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-console-sqli · Note