Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.
References
Link | Resource |
---|---|
http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ | |
http://www.securityfocus.com/bid/99899 | Third Party Advisory VDB Entry |
https://twitter.com/mkolsek/status/923988845783322625 | |
https://www.kb.cert.org/vuls/id/586501 | Third Party Advisory US Government Resource |
http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ | |
http://www.securityfocus.com/bid/99899 | Third Party Advisory VDB Entry |
https://twitter.com/mkolsek/status/923988845783322625 | |
https://www.kb.cert.org/vuls/id/586501 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:25
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ - | |
References | () http://www.securityfocus.com/bid/99899 - Third Party Advisory, VDB Entry | |
References | () https://twitter.com/mkolsek/status/923988845783322625 - | |
References | () https://www.kb.cert.org/vuls/id/586501 - Third Party Advisory, US Government Resource |
Information
Published : 2017-07-22 20:29
Updated : 2024-11-21 03:25
NVD link : CVE-2017-3221
Mitre link : CVE-2017-3221
CVE.ORG link : CVE-2017-3221
JSON object : View
Products Affected
inmarsat
- amosconnect_8
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')