SQL Injection Vulnerability in ScienceLogic SL1 Product from ScienceLogic

CVE-2022-48602

What is CVE-2022-48602?

A vulnerability has been identified in the ScienceLogic SL1's 'message viewer print' feature, which improperly handles user input. This flaw allows malicious users to insert arbitrary SQL commands into a query, potentially compromising the integrity and confidentiality of the database. By exploiting this weakness, an attacker can manipulate database queries to retrieve unauthorized data, perform administrative operations, or disrupt services, thereby posing significant risks to data security.

References