CVE-2017-11508: SQL Injection
SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11508?
CVE-2017-11508 is classified as a medium severity vulnerability due to its potential exploitation by authenticated users.
How do I fix CVE-2017-11508?
To fix CVE-2017-11508, upgrade your Tenable SecurityCenter to a version beyond 5.5.2 that includes the necessary security patches.
What kind of attack can occur due to CVE-2017-11508?
CVE-2017-11508 allows an attacker to exploit a SQL Injection vulnerability by entering crafted SQL queries into the password field.
Who is affected by CVE-2017-11508?
CVE-2017-11508 affects users of Tenable SecurityCenter versions 5.5.0, 5.5.1, and 5.5.2.
What are the implications of CVE-2017-11508?
The implications of CVE-2017-11508 include unauthorized access to sensitive data and the ability to execute arbitrary SQL commands.