Количество 4
Количество 4
CVE-2024-22108
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.
GHSA-qfhm-jrhg-gr45
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.
BDU:2024-01962
Уязвимость метода setTermsHashAction компонента /opt/webapp/lib/PureApi/CCApi.class.php DLP-системы GTB Central Console, позволяющая нарушителю выполнять произвольные SQL-запросы
BDU:2024-01961
Уязвимость метода systemSettingsDnsDataAction компонента /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php DLP-системы GTB Central Console, позволяющая нарушителю выполнить произвольную команду
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22108 An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value. | CVSS3: 9.8 | 0% Низкий | около 2 лет назад |
| GHSA-qfhm-jrhg-gr45 An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value. | CVSS3: 9.8 | 0% Низкий | около 2 лет назад |
 | BDU:2024-01962 Уязвимость метода setTermsHashAction компонента /opt/webapp/lib/PureApi/CCApi.class.php DLP-системы GTB Central Console, позволяющая нарушителю выполнять произвольные SQL-запросы | CVSS3: 9.8 | 0% Низкий | около 2 лет назад |
| BDU:2024-01961 Уязвимость метода systemSettingsDnsDataAction компонента /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php DLP-системы GTB Central Console, позволяющая нарушителю выполнить произвольную команду | CVSS3: 7.2 | 1% Низкий | около 2 лет назад |
Уязвимостей на страницу