PT-2014-3076 · Ibm · Algo Security Access Control Management+3

Publicado

2014-03-05

·

Atualizado

2017-08-29

·

CVE-2013-6302

CVSS v2.0

6.5

Média

VetorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM Algo One versions 4.7.0 through 5.0.0 ACSWeb in Algo Security Access Control Management versions 4.7.0 through 4.9.0 ACSWeb in AlgoWebApps version 5.0.0
Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Recommendations For IBM Algo One versions 4.7.0 through 5.0.0, update to a version outside of this range to resolve the issue. For ACSWeb in Algo Security Access Control Management versions 4.7.0 through 4.9.0, update to a version outside of this range to resolve the issue. For ACSWeb in AlgoWebApps version 5.0.0, update to a version later than 5.0.0 to resolve the issue.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-6302

Produtos afetados

Acsweb
Algo Security Access Control Management
Algowebapps
Ibm Algo One