Beveiligingsadvies

CVE-2021-36385

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-08-24 11:26:14

Laatst bijgewerkt 2024-08-04 00:54:51

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID field. Arbitrary system commands can be executed through the use of xp_cmdshell.

← Alle CVE's bekijken Bekijk op cve.org ↗