PT-2010-1962 · Cisco · Cisco Security Agents

Publicado

2010-02-23

·

Atualizado

2017-08-17

·

CVE-2010-0147

CVSS v2.0

6.5

Média

VetorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Cisco Security Agents versions 5.1 before 5.1.0.117 Cisco Security Agents versions 5.2 before 5.2.0.296 Cisco Security Agents versions 6.0 before 6.0.1.132
Description A SQL injection issue in the Management Center for Cisco Security Agents allows remote authenticated users to execute arbitrary SQL commands.
Recommendations For versions 5.1 before 5.1.0.117, update to version 5.1.0.117 or later. For versions 5.2 before 5.2.0.296, update to version 5.2.0.296 or later. For versions 6.0 before 6.0.1.132, update to version 6.0.1.132 or later.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-0147

Produtos afetados

Cisco Security Agents