CVE-2014-4858

ALTO 7.5CVE-2014-4858 · Published 26/07/2014 · updated 17/06/2026

In breve

CVE-2014-4858 è una vulnerabilità ALTO (CVSS 7.5) che riguarda crew management (sabreairlinesolutions), crew operations (sabreairlinesolutions), crew planning (sabreairlinesolutions).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
crew management sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew operations sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew planning sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew services sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet
crew training sabreairlinesolutions	`≤ 2010.2.12.20008`	No fix yet

Description

Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.

References

kb.cert.org/vuls/id/394540 · Third Party Advisory
securityfocus.com/bid/68899

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free