CVE-2016-2346

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream.

Allround Automations PL/SQL Developer 11 en versiones anteriores a 11.0.6 confía en datos HTTP no verificados para actualizaciones, lo que permite a atacantes man-in-the-middle ejecutar código arbitrario modificando campos en el flujo de datos cliente-servidor.