CVE-2021-42760: SQL Injection
Published Dec 8, 2021
·Updated
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclose sensitive information from DB tables via crafted requests.
Affected Software
1 affected component
Fortinet FortiWLM<=8.6.1
Remediation
Patch Available
Event History
Dec 8, 2021
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42760?
The severity of CVE-2021-42760 is high.
2
What is the vulnerability type of CVE-2021-42760?
The vulnerability type of CVE-2021-42760 is SQL injection.
3
Which software version is affected by CVE-2021-42760?
Fortinet FortiWLM version 8.6.1 and below are affected by CVE-2021-42760.
4
How can an attacker exploit CVE-2021-42760?
An attacker can exploit CVE-2021-42760 by sending crafted requests that include SQL injection payloads, allowing them to disclose sensitive information from the database tables.
5
Is there a fix or patch available for CVE-2021-42760?
It is recommended to update Fortinet FortiWLM to a version that is not affected by CVE-2021-42760 or apply the necessary security patches provided by Fortinet.