CVE-2020-26525

Published: 2020-10-02T20:15Z

Last Modified: 2024-11-21T05:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the database and server to initiate remote connections to third party DNS servers. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt