Description (CNA)
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database. An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Baxter / Connex Health Portal | affected 0 before 8/30/2024 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.