CVE-2022-28623

https://notcve.org/view.php?id=CVE-2022-28623

08 Jul 2022 — Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX. Unas vulnerabilidades de seguridad en HPE IceWall SSO versión 10.0 certd, podrían ser explotadas de forma remota para permitir una inyección de SQL o una inyección de ... • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04330en_us • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •