An attacker can exploit this to inject SQL commands into the application, resulting in a possible data loss or privilege escalation. The updated version of SmartVista SVFE2 v2.2.22 released on July 20, 2018, fixes this issue. We recommend updating your installation as soon as possible.

Another critical security issue was discovered with SmartVista SVFE2 v2.2.22, which may lead to a privilege escalation. We have released an updated version of SmartVista SVFE2 v2.2.22 on July 20, 2018, which fixes this issue. We recommend updating your installation as soon as possible. Critical security issue discovered with SmartVista SVFE2 v2.2.22 An attacker can exploit this to inject SQL commands into the application, resulting in a possible data loss or privilege escalation. The updated version of SmartVista SVFE2 v2.2.22 released on July 20, 2018, fixes this issue. We recommend updating your installation as soon as possible. End-of-life announcement: End-of-life of SmartVista SVFE2 v2.2.0 is announced

What is SmartVista SVFE2?

SmartVista SVFE2 is a file explorer application, which means it can be used to view and copy files on the local computer. It has a user interface that looks like Windows Explorer. It also supports gestures such as double-clicking on folders to open them, pinning folders to the top of the screen, and dragging a folder to another location.

Bug details: CVE-2022-38619

An attacker can exploit this to inject SQL commands into the application, resulting in a possible data loss or privilege escalation. The updated version of SmartVista SVFE2 v2.2.22 released on July 20, 2018, fixes this issue. We recommend updating your installation as soon as possible.

Critical security issue discovered with SmartVista SVFE2 v2.2.0

A critical security issue was discovered with SmartVista SVFE2 v2.2.0, which may lead to a privilege escalation. We have released an updated version of SmartVista SVFE2 v2.2.0 on July 20, 2018, which fixes this issue. We recommend updating your installation as soon as possible.

Timeline

Published on: 09/21/2022 00:15:00 UTC
Last modified on: 09/22/2022 13:03:00 UTC

References