Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-32953

MDT AutoSave SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MDT Software MDT AutoSave

  • unspecified to < 6.02.06affected

MDT Software MDT AutoSave

  • 7.00 to < 7.04affected

MDT Software AutoSave for System Platform (A4SP)

  • unspecified to < 4.01affected

MDT Software A4SP

  • 5.00affected

References