CVE-2021-35487

{"id": "CVE-2021-35487", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-05-25T14:15:08.583", "references": [{"url": "https://www.gruppotim.it/it/footer/red-team.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.nokia.com/notices/responsible-disclosure/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data."}, {"lang": "es", "value": "Nokia Broadcast Message Center versiones hasta 11.1.0 permite a un usuario autenticado llevar a cabo un ataque de inyecci\u00f3n SQL ciega booleana en el endpoint /owui/block/send-receive-updates (para la p\u00e1gina Manage Alerts) por medio del par\u00e1metro extIdentifier HTTP POST. Esto permite a un atacante obtener el usuario de la base de datos, el nombre de la base de datos y la informaci\u00f3n de la versi\u00f3n de la base de datos, y potencialmente los datos de la base de datos"}], "lastModified": "2022-06-07T19:40:39.280", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nokia:broadcast_message_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AFF6D1-FFDB-450A-92FE-876907519565", "versionEndIncluding": "11.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}