An unauthenticated SQL injection vulnerability in i-doit CMDB 1.12 exposes the application to unauthorized data extraction and potential database compromise.

This is a classic SQL injection vulnerability (CWE-89) triggered by the improper sanitization of the objGroupID parameter in GET requests. The flaw permits an unauthenticated attacker to manipulate database queries, allowing for the unauthorized retrieval of usernames, database names, and version information.

Successful exploitation allows an attacker to bypass authentication and retrieve sensitive information directly from the backend database. Given the CVSS score of 8.2, this vulnerability represents a high risk to data confidentiality, potentially leading to the exposure of administrative credentials or infrastructure details that could facilitate further attacks against the CMDB environment.

Immediate Action: Upgrade to the latest version of i-doit CMDB, as version 1.12 is confirmed vulnerable. If an immediate update is not feasible, restrict access to the application via network controls to prevent external requests to the vulnerable endpoint.

Proactive Monitoring: Review web server access logs for requests containing suspicious SQL syntax or encoded characters within the objGroupID parameter. Monitor database query logs for anomalous activity or unexpected errors originating from application service accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated SQL injection detection rules to inspect incoming GET requests and block payloads targeting the objGroupID parameter.

Public Exploit Available: Yes, a public proof of concept is available via Exploit-DB (EDB-ID: 46134).

The presence of a functional proof of concept for this SQL injection flaw necessitates immediate attention. Security teams should prioritize upgrading the affected i-doit CMDB instance to a secure version to neutralize the risk of unauthorized database access. Until the patch is applied, ensure that the application is not exposed to the public internet and utilize WAF filtering to mitigate potential exploit attempts.