high7.5
CVE-2020-35122
An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence.
Impact
An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Keysight | Keysight Database Connector | before 1.5.0 |