SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: tenable

Published: 2017-11-02T17:00:00Z

Updated: 2024-09-16T20:06:45.238Z

Reserved: 2017-07-21T00:00:00

Link: CVE-2017-11508

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-11-02T17:29:00.197

Modified: 2024-11-21T03:07:54.723

Link: CVE-2017-11508

cve-icon Redhat

No data.