Back

HIGH

An issue was discovered in the Archibus app 4.0.3 for iOS

Published Feb 2, 2024

Description

An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance module of the app. This allows performing queries on the local database.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 2, 2024
Updated Jun 3, 2025
Reserved Nov 17, 2023
CISA Vulnrichment
Updated Aug 29, 2024
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner mitre
Published Feb 2, 2024
Updated Jun 3, 2025
Exploited since n/a
EUVD-2023-52695