Vulnerability Details : CVE-2022-23168

CVE Name: CVE-2022-23168: Sql Injection vulnerability on Amodat Mobile Application Gateway
Description: The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--
Publish date: 2022-06-13T17:15Z
Last Update: 2022-06-22T18:08Z

CVSS Scores & Vulnerability Types

CVSS Score
9.8
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH
Actack VectorNETWORK
Actack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Vulnerability Type(s)Sql Injection
CWE ID89

Products Affected By CVE-2022-23168

# Vendor Product Vulnerable Versions
1 Amodat Mobile Application Gateway 1

Detail of Verions Affected

# Product Type Vendor Product Version
1 Application Amodat Mobile Application Gateway *

References For CVE-2022-23168

Hyperlink Resource
https://www.gov.il/en/departments/faq/cve_advisories Third Party Advisory