CVE-2020-14159

Affected software: ConnectWise Automate (formerly LabTech). Vulnerability: SQL injection exposed via /LabTech/agent.aspx triggered through the Automate API. Impact: remote authenticated user could execute commands and/or modify within an individual Automate instance. Root cause: improper handling...