PT-2013-1918 · Bigant · Bigant Im Message Server

Hamburgers Maccoy · Publicado 2013-02-24 · Atualizado 2013-02-25 · CVE-2012-6273

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BigAnt IM Message Server (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request, which is a type of request that can be used to search for users. This can potentially lead to unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2012-6273

Produtos afetados

Bigant Im Message Server

Referências · 2

• http://kb.cert.org/vuls/id/990652 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6273 · Nota de Segurança