Cogent DataHub Code Injection Vulnerability

CVEs (1)

Remediations

• Cogent has fixed this vulnerability in Version 7.3.5 of DataHub. This is a free upgrade for any customer running V7.x. Cogent advises that customers running versions prior to V7.3.5 do one of the following
• Upgrade to Cogent DataHub Version 7.3.5 available at: (http://www.cogentdatahub.com/Download_Software.html)
• Disable the web server component in their Cogent DataHub installation
• Configure their network security to block access to the Cogent DataHub web server from untrusted locations.

Affected Vendors

Affected Products (1)