Lucene search
PRIOn knowledge basePRION:CVE-2018-9102HistoryApr 25, 2018 - 8:29 p.m.
Sql injection
2018-04-2520:29:00
PRIOn knowledge base
www.prio-n.com
4
A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2, versions GA27 (19.49.5200.0) and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the signin interface. A successful exploit could allow an attacker to extract sensitive information from the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mivoice_connect | le | 21.84.5535.0 | |
| st_14.2 | le | 19.49.5200.0 |
Related
cvelist
cvelist
CVE-2018-9102
2018-04-25 20:00:00
cve
cve
CVE-2018-9102
2018-04-25 20:29:00
nvd
nvd
CVE-2018-9102
2018-04-25 20:29:00