CVE-2020-8427: SQL Injection
Published Feb 17, 2020
·Updated
In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.
Affected Software
1 affected component
Unitrends Backup<10.4.1
Event History
Feb 17, 2020
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-8427?
CVE-2020-8427 has a medium severity level due to its potential for SQL injection and authentication bypass.
2
How do I fix CVE-2020-8427?
To fix CVE-2020-8427, upgrade Unitrends Backup to version 10.4.1 or later.
3
What software is affected by CVE-2020-8427?
CVE-2020-8427 affects Unitrends Backup versions prior to 10.4.1.
4
What type of vulnerability is CVE-2020-8427?
CVE-2020-8427 is an SQL injection vulnerability that can lead to authentication bypass.
5
What are the risks of ignoring CVE-2020-8427?
Ignoring CVE-2020-8427 can lead to unauthorized access and potential compromise of sensitive data.