PT-2018-4027 · Suse · Suse Studio Onsite

Matthias Weckbecker + 1 · Publicado 2018-06-07 · Atualizado 2020-01-24 · CVE-2011-0467

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUSE Studio Onsite versions prior to 1.0.3-0.18.1 SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1

Description A vulnerability in SUSE Studio Onsite allows authenticated users to execute arbitrary SQL statements via SQL injection. This issue affects the listing of available software.

Recommendations For SUSE Studio Onsite versions prior to 1.0.3-0.18.1, update to version 1.0.3-0.18.1 or later. For SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1, update to version 1.1.2-0.25.1 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-0467

Produtos afetados

Suse Studio Onsite

Referências · 3

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=675039 · Exploit
• https://suse.com/security/cve/CVE-2011-0467 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0467 · Nota de Segurança