CVE-2014-4858

HOCH 7.5CVE-2014-4858 · Published 26/07/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-4858 ist eine Schwachstelle (HOCH (CVSS 7.5)) in crew management (sabreairlinesolutions), crew operations (sabreairlinesolutions), crew planning (sabreairlinesolutions).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.3%, höher als bei 70.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
crew management sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew operations sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew planning sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew services sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew training sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet

Description

Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.

References

kb.cert.org/vuls/id/394540 · Third Party Advisory
securityfocus.com/bid/68899

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free