Direct Inward Dialing: +1 408 916 9892
| Vulnerability details | |
| Severity | High |
| CVE ID | CVE-2024-36485 |
| Affected Software Version(s) | All ADAudit Plus builds below 8121 |
| Fixed Version | Build 8121 |
| Fixed on | August 19, 2024 |
An SQL injection vulnerability that could be exploited when exporting ADAudit Plus' Technician reports has been fixed.
This vulnerability could allow an authenticated adversary to execute custom queries and access the database table entries using the vulnerable request.
Update your ADAudit Plus instance to the latest build — 8121 — using the service pack.
This issue was reported internally.
Please contact support@adauditplus.com for more details.
