2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Trust Protection Foundation","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"25.3.3","status":"unaffected"}],"lessThan":"25.3.3","status":"affected","version":"25.3.0","versionType":"custom"},{"changes":[{"at":"25.1.8","status":"unaffected"}],"lessThan":"25.1.8","status":"affected","version":"25.1.0","versionType":"custom"},{"changes":[{"at":"24.3.6","status":"unaffected"}],"lessThan":"24.3.6","status":"affected","version":"24.3.0","versionType":"custom"},{"changes":[{"at":"24.1.13","status":"unaffected"}],"lessThan":"24.1.13","status":"affected","version":"24.1.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an attacker to read sensitive data, modify database contents, and escalate privileges to gain full administrative control of the platform."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en Trust Protection Foundation permite a un atacante autenticado ejecutar comandos SQL arbitrarios contra la base de datos del producto. La explotación exitosa podría permitir a un atacante leer datos sensibles, modificar el contenido de la base de datos y escalar privilegios para obtener control administrativo total de la plataforma."}],"id":"CVE-2026-0242","lastModified":"2026-10-26T14:10:00.130","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"YES","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"ADJACENT","availabilityRequirement":"NOT_DEFINED","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"UNREPORTED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"CONCENTRATED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"psirt@paloaltonetworks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0242","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-14T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-05-13T19:16:58.130","references":[{"source":"psirt@paloaltonetworks.com","url":"https://security.paloaltonetworks.com/CVE-2026-0242"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"}]}
|