Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2018/12/14 12:29 a.m.•33 views

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

4.3CVSS7.4AI score0.01428EPSS
SaveExploits0References2
Prion
Prion
•added 2018/12/14 12:29 a.m.•27 views

Sql injection

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

4CVSS6.6AI score0.01835EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/12/13 10:00 p.m.•56 views

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

4.3CVSS6.6AI score0.01428EPSS
SaveExploits0References2
Mend
Mend
•added 2018/12/13 10:00 p.m.•3 views

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

5.3CVSS0.01428EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2018/12/13 11:10 a.m.•27 views

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs...

4.3CVSS3.5AI score0.01428EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/13 12:00 a.m.•7 views

CVE-2018-14623: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

4.3CVSS7.4AI score0.01428EPSS
SaveExploits0References4
Rows per page
Query Builder