Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Northern.tech CFEngine 安全漏洞
Vulnerability Description
Northern.tech CFEngine是一款IT基础架构配置管理和自动化框架。 Northern.tech CFEngine Enterprise 3.6.0到3.18.6 、 3.21.3之前版本存在安全漏洞，该漏洞源于Web UI、Mission Portal 中存在注入缺陷，导致对底层数据库进行未经授权的访问。
CVSS Information
N/A
Vulnerability Type
N/A