Vulnerability Note VU#122142

Mercator SENTINEL SQL injection allows authentication bypass

Overview

Mercator SENTINEL contains an SQL injection vulnerability that could allow an attacker to bypass authentication and access the system with administrative privileges.

I. Description

Mercator SENTINEL is a flight safety management system. The login form of the web interface contains an SQL injection vulnerability. Please see CERT-NPS:2011:005 for more information.

II. Impact

An attacker with network access to the SENTINEL web interface could access the system with administrative privileges.

III. Solution

Upgrade

Credible information indicates that this vulnerability is addressed in SENTINEL version 2.0.1.0.

Restrict access

Restrict access to the SENTINEL web interface to trusted users and networks.

Vendor Information

Vendor	Status	Date Notified	Date Updated
Mercator	Affected	2011-06-22	2011-10-14

References

http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/
http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
http://www.mercator.com/customers/CustMap/customermap.html
http://cwe.mitre.org/data/definitions/89.html

Credit

Thanks to CERT-NETPEAS for reporting this vulnerability. Thanks also to ICS-CERT and aeCERT for their assistance.

This document was written by Art Manion.

Other Information

Date Public:	2011-06-20
Date First Published:	2011-09-14
Date Last Updated:	2011-10-14
CERT Advisory:
CVE-ID(s):	CVE-2011-1913
NVD-ID(s):	CVE-2011-1913
US-CERT Technical Alerts:
Severity Metric:	1.22
Document Revision:	13