Vulnerability Description
Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php (aka the server login page).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Telestream | Medius | < 10.7.5 |
| Telestream | Sentry | < 10.7.5 |
Related Weaknesses (CWE)
References
- https://github.com/google/security-research/security/advisories/GHSA-g69r-8jwh-2ExploitThird Party Advisory
- https://github.com/google/security-research/security/advisories/GHSA-g69r-8jwh-2ExploitThird Party Advisory
FAQ
What is CVE-2020-8887?
CVE-2020-8887 is a vulnerability with a CVSS score of 7.5 (HIGH). Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=lo...
How severe is CVE-2020-8887?
CVE-2020-8887 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-8887?
Check the references section above for vendor advisories and patch information. Affected products include: Telestream Medius, Telestream Sentry.