← Volver a CVEs

CVE-2018-18286

N/A

Descripcion

SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado4/25/2019

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

mitel:cmg_suite

Debilidades (CWE)

CWE-89

Referencias

https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-19-0003-001.pdf(cve@mitre.org)

https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001(cve@mitre.org)

https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-19-0003-001.pdf(af854a3a-2127-422b-91ae-364da2661108)

https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-adivsory-19-0003-001(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.