Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.
References
Link | Resource |
---|---|
http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ | |
http://www.securityfocus.com/bid/99899 | Third Party Advisory VDB Entry |
https://twitter.com/mkolsek/status/923988845783322625 | |
https://www.kb.cert.org/vuls/id/586501 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-07-22 20:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-3221
Mitre link : CVE-2017-3221
CVE.ORG link : CVE-2017-3221
JSON object : View
Products Affected
inmarsat
- amosconnect_8
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')