Infoblox NetMRI Unauthenticated SQL Injection Vulnerability

A high-severity SQL injection vulnerability allowing unauthenticated attackers to manipulate SQL queries has been identified in Infoblox NetMRI versions prior to 7.6.1. This vulnerability could potentially be exploited to access or modify database information.

Impact

Exploitation of this vulnerability allows for unauthenticated SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive data.

Remediation

Users can upgrade to Infoblox NetMRI version 7.6.1 or later. For those using versions 7.5.3, 7.5.4, or 7.6.0, a hotfix is available through the autoupdate server. The hotfix can also be downloaded and installed using the 'au' command. For any additional queries, customers should contact Infoblox Support.