PT-2013-2396 · Ibm · Ibm Security Appscan Enterprise

Published 2013-03-29 · Updated 2017-08-29 · CVE-2013-0511

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 5.6 and 8.x before 8.7

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to multiple SQL injection vulnerabilities.

Recommendations For IBM Security AppScan Enterprise version 5.6, update to a version after 8.7 to resolve the issue. For IBM Security AppScan Enterprise versions 8.x before 8.7, update to version 8.7 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-0511

Affected Products

Ibm Security Appscan Enterprise

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0511 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82344 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21626264 · Note