CVE-2017-3221

Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwords.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:inmarsat:amosconnect_8:8.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.2.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.3.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.4.0:*:*:*:*:*:*:*
cpe:2.3:a:inmarsat:amosconnect_8:8.4.0.1:*:*:*:*:*:*:*

History

21 Nov 2024, 03:25

Type Values Removed Values Added
References () http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ - () http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ -
References () http://www.securityfocus.com/bid/99899 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/99899 - Third Party Advisory, VDB Entry
References () https://twitter.com/mkolsek/status/923988845783322625 - () https://twitter.com/mkolsek/status/923988845783322625 -
References () https://www.kb.cert.org/vuls/id/586501 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/586501 - Third Party Advisory, US Government Resource

Information

Published : 2017-07-22 20:29

Updated : 2024-11-21 03:25


NVD link : CVE-2017-3221

Mitre link : CVE-2017-3221

CVE.ORG link : CVE-2017-3221


JSON object : View

Products Affected

inmarsat

  • amosconnect_8
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')