External risk intelligence

CDG Server SQL Injection Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2024-35563

The vulnerability exists in a server-side application component. Software of this type is commonly deployed as a network-accessible service or web-based management interface, making it plausibly reachable from the internet in typical enterprise or organizational deployments.

SQL Injection

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical SQL injection vulnerability has been identified in a server-side application, allowing unauthenticated attackers to potentially compromise sensitive data and system integrity. This issue affects specific versions of the CDG-Server software. The primary concern at this stage is to determine if this technology is deployed within our environment to assess any potential exposure.

Allows unauthenticated remote data compromise.
Critical remote code execution risk identified.
Confirm relevance and exposure in our environment.

Attack Path

How an attacker could exploit the issue

A remote attacker could exploit this SQL injection vulnerability by sending a specially crafted request to the affected server. This request would target the `permissionId` parameter within the `CDGTempPermissions` functionality. If successful, the attacker could manipulate database queries, potentially leading to unauthorized access to or modification of sensitive data.

No authentication required.
Inject malicious SQL via `permissionId`.
Data exposure and modification.

Live Threat

Current exploitation, exposure, and threat context

A SQL injection vulnerability in the `permissionId` parameter of CDG-Server could allow an unauthenticated attacker to manipulate database queries when supported by the advisory. This could lead to unauthorized access to or modification of sensitive data stored within the application's database.

Database integrity and confidentiality.
Manipulating `permissionId` parameter.
Unauthorized data access or modification.

Operational Fix

Recommended remediation, mitigation, and detection steps

This SQL injection vulnerability in CDG-Server impacts the permission management functionality, indicating that the Application Owner or Platform Team responsible for CDG-Server is the primary point of contact. The first practical step is to identify all instances of CDG-Server, confirm their exposure and business criticality, and then assign ownership for remediation planning.

Application owner to address the vulnerability.
Verify CDG-Server instances and exposure.
Plan remediation based on identified risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is CDG-Server?

CDG-Server is a software application often used as a centralized platform for managing data security and file permissions. It acts as a server-side hub that regulates access controls across an organization's digital environment, which is why it holds sensitive information and requires careful maintenance to remain secure.

What does CWE-89 mean for CVE-2024-35563?

CWE-89 identifies the vulnerability as a SQL Injection. This happens when an application fails to properly clean user-provided input before using it in a database query. In this specific case, the software trusts malicious input provided to the permissionId parameter, allowing an attacker to insert their own commands into the database.

How does an attacker trigger this vulnerability?

An attacker triggers this by sending a specially crafted web request to the CDG-Server that targets the permissionId parameter. The bug is not triggered by standard, legitimate use of the interface; it requires specifically formatted input designed to manipulate the underlying database logic. If the request does not target this exact component with malicious intent, the flaw remains inactive.

Why is this CVE considered relevant to my network?

According to Halo Surface Signal, this vulnerability affects a server-side component typically deployed as a network-accessible service. Because these interfaces are often exposed to facilitate remote management, there is a high likelihood they are reachable from the internet, increasing the potential for unauthorized access to the underlying database.

What should I do if I run CDG-Server?

Your first step is to create an accurate inventory of all CDG-Server instances running in your environment. Once identified, coordinate with the specific application owners to confirm whether your deployments are reachable over the network and prioritize these systems for remediation planning to address the risk of unauthorized database modification.

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.