Input validation

2022-09-1914:15:00

PRIOn knowledge base

www.prio-n.com

software security

fme server

version 2021.2.5

server-side validation

nvd

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

Safe Software FME Server v2021.2.5 and below does not employ server-side validation.

CPENameOperatorVersion
fme_serverge2021.2.3
fme_serverlt2021.2.6

CPE	Name	Operator	Version
	fme_server	ge	2021.2.3
	fme_server	lt	2021.2.6

References

community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server

www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/