PT-2013-2396 · Ibm · Ibm Security Appscan Enterprise

Publicado 2013-03-29 · Atualizado 2017-08-29 · CVE-2013-0511

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 5.6 and 8.x before 8.7

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities.

Recommendations For IBM Security AppScan Enterprise version 5.6, update to a version after 8.7 to resolve the issue. For IBM Security AppScan Enterprise versions 8.x before 8.7, update to version 8.7 or later to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-0511

Produtos afetados

Ibm Security Appscan Enterprise

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/82344 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21626264 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0511 · Nota de Segurança