1. Home
  2. CVE Database
  3. CVE-2017-2241
MEDIUM · 6.3

CVE-2017-2241

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

Vulnerability Description

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

CVSS Score

6.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
HammockAssetview9.2
AppleMac Os X<= -

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2017-2241?

CVE-2017-2241 is a vulnerability with a CVSS score of 6.3 (MEDIUM). SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service".

How severe is CVE-2017-2241?

CVE-2017-2241 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2241?

Check the references section above for vendor advisories and patch information. Affected products include: Hammock Assetview, Apple Mac Os X.