CVE-2024-3457: Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection
First published: Mon Apr 08 2024(Updated: )
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259713 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netentsec NS-ASG Application Security Gateway | ||
| Netentsec Application Security Gateway | =6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3457?
CVE-2024-3457 is classified as a critical vulnerability.
How does CVE-2024-3457 affect Netentsec NS-ASG Application Security Gateway?
CVE-2024-3457 allows for SQL injection through manipulation of the GroupId argument in the /admin/config_ISCGroupNoCache.php file.
How can I mitigate CVE-2024-3457?
Mitigation for CVE-2024-3457 involves applying any available security patches from Netentsec for the NS-ASG Application Security Gateway.
What version of Netentsec NS-ASG Application Security Gateway is affected by CVE-2024-3457?
CVE-2024-3457 affects Netentsec NS-ASG Application Security Gateway version 6.3.
What can be compromised due to CVE-2024-3457?
CVE-2024-3457 can potentially allow attackers to access and manipulate the database through SQL injection.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/netentsec
- canonical/netentsec ns-asg application security gateway
- canonical/netentsec application security gateway
- version/netentsec application security gateway/6.3