Insufficient Validation in RAVA Certificate Validation System Allows Remote SQL Injection

CVE-2022-39056 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.