Overview
IPSwitch WhatsUp Gold version 16.3 does not properly validate data when deserializing XML objects sent over SOAP requests.
Description
CWE-502: Deserialization of Untrusted Data - CVE-2015-8261 WhatsUp Gold version 16.3 contains a SOAP request handler named DroneDeleteOldMeasurements. User-controlled data may be passed to the application within a serialized XML object via a SOAP request. This data is later directly included into an SQLite query without being sanitized or properly escaped, allowing an attacker to perform SQL Injection attacks. |
Impact
An unauthenticated remote attacker may be able to execute SQL queries on the database. |
Solution
Apply an update |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 10 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Temporal | 7.8 | E:POC/RL:OF/RC:C |
| Environmental | 5.9 | CDP:ND/TD:M/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to Matt Buzanowski for reporting this vulnerability.
This document was written by Garret Wassermann.
Other Information
| CVE IDs: | CVE-2015-8261 |
| Date Public: | 2015-12-19 |
| Date First Published: | 2016-01-07 |
| Date Last Updated: | 2016-01-07 16:36 UTC |
| Document Revision: | 25 |