{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eSygate Management Server 4.1.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans l\u0027applet d\u0027authentification de\nSygate Management Server. Cette vuln\u00e9rabilit\u00e9 de type \u00abinjection SQL\u00bb\npeut \u00eatre employ\u00e9e par un utilisateur mal intentionn\u00e9, via des requ\u00eates\nSQL malicieusement construites, pour porter atteinte la confidentialit\u00e9\nou l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n\n## Solution\n\nAppliquer le correctif disponible sur le site de l\u0027\u00e9diteur (cf. section\ndocumentation).\n",
  "cves": [],
  "initial_release_date": "2006-02-10T00:00:00",
  "last_revision_date": "2006-02-10T00:00:00",
  "links": [
    {
      "title": "Site internet de Symantec :",
      "url": "http://www.symantec.com"
    }
  ],
  "reference": "CERTA-2006-AVI-066",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-02-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 sur Symantec Sygate Management Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Symantec",
      "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html"
    }
  ]
}