Описание
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
Уязвимые конфигурации
Конфигурация 1Версия до 8.17.0 (исключая)Версия от 4.0 (включая) до 5.0 (включая)
Одно из
cpe:2.3:a:vmware:aria_automation:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.01906
Низкий
8.5 High
CVSS3
8.1 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 8.5
github
больше 1 года назад
VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product. An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database.
EPSS
Процентиль: 83%
0.01906
Низкий
8.5 High
CVSS3
8.1 High
CVSS3
Дефекты
CWE-89
CWE-89