Not rated
CVE-2020-3973 The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection
Description
The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware SD-WAN by VeloCloud | Versions not published |