CVE-2020-8887

7.5

HIGHCVSS v3

Published

September 22, 2020

CVSS v2

5 MEDIUM

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php (aka the server login page).

telestream / sentry

cpe:2.3:a:telestream:sentry:*:*:*:*:*:*:*:*

< 10.7.5

telestream / medius

cpe:2.3:a:telestream:medius:*:*:*:*:*:*:*:*

< 10.7.5

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2020-8887

Description

More on this CVE