CVE-2024-10500

ESAFENET CDG 5 is affected by a SQL injection in the HookWhiteListService.java file, where manipulating the policyId argument enables remote exploitation. This vulnerability is corroborated across multiple sources (including PT-Security and CVE records) and is described as affecting unknown funct...

CVE-2024-10500 ESAFENET CDG HookWhiteListService.java sql injection

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sql injection. The attack may be launche...

PT-2024-16321 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found in ESAFENET CDG, affecting some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the policyId argument leads to S...