CVE-2022-0366

An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1.

Score

CVSS 3.1 8.8 High

Status

Modified - security-alert@sophos.com

Published

2022-02-02

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Capsule8 (Capsule8)

References

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-console-sqli