PT-2018-9984 · Bd · Bd Kiestra+2

Publicado 2018-05-24 · Atualizado 2019-10-09 · CVE-2018-10593

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Média

Vetor base

AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: DB Manager versions prior to 3.0.1.0 PerformA versions prior to 3.0.0.0

Description: A vulnerability allows an authorized user with access to a privileged account on a BD Kiestra system to issue SQL commands, potentially resulting in data corruption.

Recommendations: For DB Manager versions prior to 3.0.1.0, update to version 3.0.1.0 or later to resolve the issue. For PerformA versions prior to 3.0.0.0, update to version 3.0.0.0 or later to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-356

CWE-89

Identificadores relacionados

CVE-2018-10593

Produtos afetados

Bd Kiestra

Db Manager

Performa

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-10593 · Aviso do Fabricante
• https://bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-10593 · Nota de Segurança