CVE-2016-2346

2016-04-25T18:59:00
ID CVE-2016-2346
Type cve
Reporter cve@mitre.org
Modified 2016-05-04T13:39:00

Description

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.