tocsin

Debian/ocsinventory-server: medium 6.5

OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access

Action: Upgrade ocsinventory-server to 2.4.1+dfsg-1 or later.

Affected

introducedfixedlast affected
02.4.1+dfsg-1-

Fixed versions

2.4.1+dfsg-1

Sources

published · modified · JSON