Database client vulnerability
High
Example incident
- Status
- Patch available
- Affected
- Example DB desktop 4.2
- Fixed in
- 4.2.1
Summary
The desktop client accepts a malicious connection string that can run local commands.
Updates
-
2h ago
Fixed client released
Incident brief
Database client vulnerability
High · Patch available
Affected: Example DB desktop 4.2
Fixed in: 4.2.1
The desktop client accepts a malicious connection string that can run local commands.
What to do:
- Update the desktop client to 4.2.1.
- Do not open connection strings from untrusted mail.
Sources:
- Vendor note https://example.com/db-client