Beveiligingsadvies

CVE-2020-13504

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-09-24 14:12:55
Laatst bijgewerkt 2024-08-04 12:18:18
Toegewezen door talos
CVSS-score geen score
Status PUBLISHED

Beschrijving

Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability.