CVE-2024-10660 — AI Deep Analysis Summary

🚨 **Essence**: SQL Injection in **EsafeNet CDG v5**. 📉 **Consequences**: Attackers can manipulate database queries via the `hookId` parameter in `HookService.java`.…

🛡️ **Root Cause**: **CWE-89** (SQL Injection). 🐛 **Flaw**: The file `/com/esafenet/servlet/policy/HookService.java` fails to properly sanitize the `hookId` input parameter before using it in SQL operations.…

🏢 **Vendor**: **ESAFENET** (China Yisaitong). 📦 **Product**: **CDG** (Document Security Management System). 📅 **Affected Version**: **v5**.…

💻 **Capabilities**: Hackers can execute arbitrary SQL commands. 🔓 **Privileges**: Requires **Local Privileges** (PR:L) to exploit.…

🔑 **Auth Required**: **YES**. ⚠️ **Threshold**: **Medium**. The CVSS vector `PR:L` means the attacker must have **Local Privileges** (authenticated access) on the system. It is NOT a remote unauthenticated exploit.…

💣 **Public Exploit**: **Likely Available**. 📎 **Evidence**: References include a link tagged as `exploit` (Flowus share) and third-party advisories on VulDB.…

🔍 **Self-Check Method**: Scan for **EsafeNet CDG v5** installations. 🎯 **Target URL**: Look for requests to `/com/esafenet/servlet/policy/HookService`. 🧪 **Test**: Inject SQL payloads into the `hookId` parameter.…

🛠️ **Official Fix**: **Unknown/Not Explicitly Stated**. 📝 **Note**: The provided data does not contain a specific patch version or vendor advisory link confirming a fixed version.…

🚧 **Workaround**: If no patch is available, **restrict access** to the `HookService` endpoint. 🔒 **Network**: Block external access to the CDG management interface.…

⏰ **Urgency**: **Medium-High**. 📈 **Reason**: Although it requires local privileges, SQL Injection is a critical flaw type. 📉 **CVSS**: The vector `AV:N/AC:L/PR:L` means it's easy to exploit if you have access.…