CVE-2017-2241 SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
MediumCVSS 6.3
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hammock Corporation AssetView | = 9.2 | No fix listed |
| Hammock Corporation AssetView for MacOS | = Ver.9.2.0 and earlier versions | No fix listed |
References
- jvn.jp third-party-advisory
- www.hammock.jp patch vendor-advisory