CVE-2024-46542

Summary

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.

Affected Software

Weaknesses

• CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.veritas.com/support/en_US/security/ARC24-001
• https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2024-46542

• ←Previous
• Next→