Security Advisory

CVE-2020-11597

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-06 21:32:15
Last updated 2024-08-04 11:35:13
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an HTTP POST request and inject SQL statements in the user context of the db owner.