PT-2013-3666 · Hewlett Packard · Hp Sql/Mx

Published 2013-06-28 · Updated 2019-10-09 · CVE-2013-2323

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP SQL/MX versions 3.0 through 3.2 on NonStop servers

Description The issue allows remote authenticated users to bypass intended access restrictions and modify data. This is related to the use of SQL/MP Objects.

Recommendations For HP SQL/MX versions 3.0 through 3.2, consider restricting access to SQL/MP tables until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-2323

Affected Products

Hp Sql/Mx

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-2323 · Security Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03762155 · Vendor Advisory