CVE-2017-2241: SQL Injection
Published Jul 14, 2017
·Updated
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
Affected Software
2 affected components
Hammock Assetview=9.2
Apple iOS and macOS<=-
Remediation
Patch Available
Event History
Jul 14, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2241?
CVE-2017-2241 has a medium severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2017-2241?
To fix CVE-2017-2241, upgrade AssetView for MacOS to version 9.2.1 or later, which includes patches for this vulnerability.
3
Who is affected by CVE-2017-2241?
CVE-2017-2241 affects users of AssetView for MacOS version 9.2.0 and earlier.
4
What is the impact of CVE-2017-2241?
The impact of CVE-2017-2241 includes the ability for remote attackers to execute arbitrary SQL commands on the affected system.
5
Is CVE-2017-2241 related to any specific software?
CVE-2017-2241 is specifically related to the AssetView software by Hammock for MacOS.