First published: Fri Jul 14 2017(Updated: )
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
hammock AssetView | =9.2 | |
Apple iOS and macOS | <=- |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-2241 has a medium severity rating due to its potential for remote SQL injection attacks.
To fix CVE-2017-2241, upgrade AssetView for MacOS to version 9.2.1 or later, which includes patches for this vulnerability.
CVE-2017-2241 affects users of AssetView for MacOS version 9.2.0 and earlier.
The impact of CVE-2017-2241 includes the ability for remote attackers to execute arbitrary SQL commands on the affected system.
CVE-2017-2241 is specifically related to the AssetView software by Hammock for MacOS.