CVE-2024-10660

CVE-2024-10660 affects ESAFENET CDG 5, specifically the deleteHook function in HookService.java. The vulnerability arises from improper handling of the hookId argument, enabling SQL injection. The issue can be exploited remotely, and public disclosures exist. Supported details from connected docs...

PT-2024-16438 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue was found in ESAFENET CDG, affecting the deleteHook function in the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the hookId argument leads to SQL injection. This...