RULE(RULE ID:338324)

Rule General Information
Release Date: 2024-08-20
Rule Name: Esafenet Electronic Document Security Management System SecretKeyService SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Esafenet Electronic Document Security Management System (CDG) is an electronic document security encryption software. Esafenet CDG SecretKeyService interface SQL injection vulnerability, unauthenticated malicious attackers can use SQL injection vulnerability to obtain information in the database.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.