Security Advisory
CVE-2020-14982
6.5
MEDIUM
Vulnerability Description
A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter) allows an attacker with the Employee, Supervisor, or Timekeeper role to read sensitive data from the database.
Published Date
July 15, 2020
Official Source
NIST NVD Advisory