high8.1
CVE-2016-2346
Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrar…
Impact
Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allroundautomations | Pl\/Sql Developer | Versions 11.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, 11.0.5 |