CVE-2021-32953 MDT AutoSave SQL Injection

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

CVE-2021-32953

MDT AutoSave is affected by CVE-2021-32953 (SQL Injection). The vulnerability allows an attacker to execute SQL commands to create a new user and update permissions, enabling login. Affected: MDT AutoSave versions prior to 6.02.06 (and related AutoSave for System Platform entries in the family). ...