Home › Forums › Lina forums – EN › Lina : Troubleshooting & Security › Advisory ID : LINA/ADE-2021-0001
- This topic is empty.
Viewing 0 reply threads
-
AuthorPosts
-
-
10 December 2021 at 21 h 40 min #11000
Marc Verheyen
KeymasterAdvisory ID : LINA/ADE-2021-0001
CVSSv3 Range : 8.4-9.8
Issue Date : 2021-12-03
Release Patch : 2021-12-03
CVE(s): N/A
Synopsis :
SQL Injection vulnerability exists in LINA in admin console via the login page
Product :
LINA / ADE admin console
Version :
From 5.0 to 5.2 of Lina
From 5.0 to 5.2 for ADE
Problem type :
https://cwe.mitre.org/data/definitions/89.html
Description :
Improper Neutralization of Special Elements used in an SQL Command in LINA version 5.0 to 5.2 on admin console allow attackers to obtain sensitive database information in order to get administration access.
Mitigations or workaround :
Install security update patch 5.2.2RC_B1695 or get the GA version Lina 5.3.0
-
-
AuthorPosts
Viewing 0 reply threads
- You must be logged in to reply to this topic.
Sujets / Topics
- Tina 4.8.1 GA is available
- Lina 6.1 is available
- Tina 4.8.1 Controlled Release is available
- PowerShell for Lina 6.0
- Advisory ID : LINA/ADE-2023-0002
- Advisory ID : LINA/ADE-2023-0001
- Miria 4.0 is available
- Lina 6.0 is available !
- Tina 4.7.1 GA is available
- Recent Tina versions require CentOS 7 minimum
Flux RSS / RSS Subscription
Tous les articles
Tous les sujets (forums)
All articles
All Topics (forums)
Tous les articles
Tous les sujets (forums)
All articles
All Topics (forums)