CVE-2020-14159

By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance by triggering an SQL injection vulnerability in /LabTech/agent.aspx. This affects versions before 2019.12.337, 2020...

PT-2020-13900

Name of the Vulnerable Software and Affected Versions ConnectWise Automate versions prior to 2019.12.337 ConnectWise Automate versions 2020 before 2020.1.53 ConnectWise Automate versions 2020.2 before 2020.2.85 ConnectWise Automate versions 2020.3 before 2020.3.114 ConnectWise Automate versions...

CVE-2020-14159: Improper Neutralization of Special Elements used in an SQL Command

By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance by triggering an SQL injection vulnerability in /LabTech/agent.aspx. This affects versions before 2019.12.337, 2020...