Description
FlyCASS CASS and KCM systems did not correctly filter SQL queries, which
made them vulnerable to attack by outside attackers with no
authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FlyCASS | Cockpit Access Security System (CASS) | < May 7, 2024 | May 7, 2024 |
| FlyCASS | Known Crewmember (KCM) | < May 7, 2024 | May 7, 2024 |