Intrusion PreventionApache.SkyWalking.Alarm.Wildcard.Search.GraphQL.SQL.Injection
Description
This indicates an attack attempt to exploit an SQL Injection Vulnerability in Apache Software Foundation SkyWalking.
The vulnerability is due to insufficient validation of the user-supplied input for wildcard alarm search query through GraphQL protocol. A remote attacker could exploit this vulnerability by sending malicious requests to a vulnerable Apache SkyWalking server. Successful exploitation of this vulnerability could result in execution of arbitrary SQL code and lead to information disclosure.
Affected Products
Apache Software Foundation SkyWalking 6.5.0 to 8.0.1
Impact
System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread.html/r6f3a934ebc54585d8468151a494c1919dc1ee2cccaf237ec434dbbd6@%3Cdev.skywalking.apache.org%3E
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 49541 |
| Created | Oct 12, 2020 |
| Updated | Dec 01, 2020 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 5.95% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris |
| Affected App | Apache |
| Profile Type | SQL Injection |