Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-23214

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.3%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.1
Products affected by CVE-2021-23214


Contact Us

Shodan ® - All rights reserved