CVE-2024-10377

CVE-2024-10377 affects ESAFENET CDG 5. The issue is in the function actionPassDecryptApplication1 of /com/esafenet/servlet/client/DecryptApplicationService.java. The attacker can manipulate the id parameter to trigger SQL injection, with remote exploitability reported. Publicly disclosed exploits...

CVE-2024-10377 ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be initiate...

PT-2024-16229 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue affects the actionPassDecryptApplication1 function in the /com/esafenet/servlet/client/DecryptApplicationService.java file. The manipulation of the id argument leads to SQL injection. The...