← CVE Intelligence

CVE-2020-3973

n/a / VMware SD-WAN by VeloCloud PUBLISHED

Description (CNA)

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged.

Affected (CNA)

Vendor / productVersions
n/a / VMware SD-WAN by VeloCloudaffected VMware SD-WAN by VeloCloud 3.2.x, 3.3.x prior to 3.3.2 p2, 3.4.x prior to 3.4.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.