SQL injection vulnerability in Snow License Manager

CVE-2023-3864

What is CVE-2023-3864?

A blind SQL injection vulnerability exists in the Snow Software License Manager, affecting versions 8.0.0 to 9.30.1. This vulnerability enables a logged-in user with elevated privileges to inject malicious SQL commands through the web portal. Such exploitation can lead to unauthorized data access and manipulation, posing significant risks to information integrity and system security.

References