CVE-2017-3221

Опубликовано: 22 июл. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.

Конфигурация 1

Одно из

cpe:2.3:a:inmarsat:amosconnect_8:8.0:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.2.0:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.2.1:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.2.2:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.3.0:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.3.1:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.4.0:*:*:*:*:*:*:*

cpe:2.3:a:inmarsat:amosconnect_8:8.4.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02048

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

CWE-89

GHSA-74xr-j6fq-776m