Security Advisory

CVE-2022-24691

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-18 12:34:34
Last updated 2024-08-03 04:20:49
Assigner mitre
State PUBLISHED

Description

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.