CVE-2024-33872: SQL Injection
Published Aug 20, 2024
·Updated
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.
Affected Software
1 affected component
Keyfactor Command<10.5.1, <11.5.1
Event History
Aug 20, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33872?
CVE-2024-33872 is considered a high severity vulnerability due to its potential for code execution and privilege escalation.
2
How do I fix CVE-2024-33872?
To remediate CVE-2024-33872, upgrade Keyfactor Command to version 10.5.1 or 11.5.1 or later.
3
What type of vulnerability is CVE-2024-33872?
CVE-2024-33872 is classified as a SQL Injection vulnerability.
4
What software is affected by CVE-2024-33872?
CVE-2024-33872 affects Keyfactor Command versions 10.5.x before 10.5.1 and 11.5.x before 11.5.1.
5
Can CVE-2024-33872 be exploited remotely?
Yes, CVE-2024-33872 can be potentially exploited remotely if an attacker is able to send specially crafted requests to the affected software.