CVE-2024-3455

Summary

CVE-2024-3455 is a newly disclosed critical vulnerability affecting Netentsec NS-ASG Application Security Gateway version 6.3. The issue lies in an unknown functionality of the file /admin/add_postlogin.php, which can be exploited through sql injection by manipulating the argument SingleLoginId. The attack can be launched remotely, making it a significant threat. The vulnerability has been disclosed to the public, increasing the risk of exploitation. The associated identifier for this issue is VDB-259711.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.