CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 4.0
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: the workpoint component, which is embedded in all rsa archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a sql injection vulnerability. a malicious user could potentially exploit this vulnerability to execute sql commands on the back-end database to read certain data. embedded workpoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-08-24
Last Modified Date: 2019-10-09