CVE-2018-10197
Critical
Description
There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the "userdata" table from the "eloam" database.
SeverityCritical
CVSS9.8
Exploit probability—
ProductElo Access Manager
PublishedJul 11, 2018
First seenJul 11, 2018
How to fix
Update
- elo access_manager9.18.040, 10.18.040 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elo access_manager | v < 9.18.040, 10.0.0 < v < 10.18.040 | 9.18.040, 10.18.040 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.