CVE-2023-22378
Assigner: Nozomi
Published: 2023-08-09T08:01:57.279Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Guardian
vendor: Nozomi Networks
versions: lessThan: 22.6.2
status: affected
version: 0
versionType: semver
defaultStatus: unaffected
product: CMC
vendor: Nozomi Networks
versions: lessThan: 22.6.2
status: affected
version: 0
versionType: semver
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: This issue was found by Stefano Libero of Nozomi Networks Product Security team during a scheduled internal VAPT testing session.
descriptions: supportingMedia: base64: no
type: text/html
value: <p>A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.</p><p>Authenticated users can extract arbitrary information from the DBMS in an uncontrolled way.</p>
value: A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

Authenticated users can extract arbitrary information from the DBMS in an uncontrolled way.


impacts: capecId: CAPEC-7
descriptions: value: CAPEC-7 Blind SQL Injection
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: <p>Upgrade to v22.6.2 or later.</p>
value: Upgrade to v22.6.2 or later.


source: discovery: INTERNAL
title: Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
workarounds: supportingMedia: base64: no
type: text/html
value: <p>Use internal firewall features to limit access to the web management interface.</p>
value: Use internal firewall features to limit access to the web management interface.


x_generator: engine: Vulnogram 0.1.0-dev