Unscored CVE-2017-2241 EUVD-2017-11424GHSA-25j4-vfxf-h9xv

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL comm…

Published Jul 14, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Hammock Product: AssetView for MacOS Platform: macOS

Description

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

Affected products

Vendor	Product	Affected	Fixed
Hammock	AssetView for MacOS	Ver.9.2.0 and earlier versions	—

References

https://www.hammock.jp/assetview/info/170714.html
http://jvn.jp/en/vu/JVNVU93377948/index.html