EUVD-2018-18850

Malware in sbrugna...

HPE Device Entitlement Gateway SQL Injection Vulnerability

HPE Device Entitlement Gateway DEG is a set of device entitlement management solutions from Hewlett Packard Enterprise HPE. A SQL injection vulnerability exists in HPE DEG versions 3.2.4, 3.3, and 3.3.1, which can be exploited by remote attackers to inject SQL commands and elevate privileges...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

CVE-2018-7107

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

PT-2018-17910

Name of the Vulnerable Software and Affected Versions HPE Device Entitlement Gateway versions 3.2.4 through 3.3.1 Description A potential security issue has been identified that could be remotely exploited, allowing local SQL injection and elevation of privilege. Recommendations For versions 3.2....

CVE-2018-7107: Improper Neutralization of Special Elements used in an SQL Command

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

HPESBGN03889 rev.1 - HPE Device Entitlement Gateway (DEG), Remote SQL Injection and Elevation of Privileges

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Device Entitlement Gateway DEG Prior to DEG v3.2.4, DEG v3.3, DEG v3.3.1 with DEG NRBGUI PC1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7107 |...