PT-2015-6377 · Actian · Actian Matrix

Published 2015-06-13 · Updated 2016-12-06 · CVE-2015-3993

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Actian Matrix versions 5.1.x through 5.1.2.4 Actian Matrix versions 5.2.x through 5.2.0.1

Description The issue allows remote authenticated users to bypass intended write-access restrictions. This is achieved by referencing a table to execute an UPDATE statement.

Recommendations For Actian Matrix versions 5.1.x through 5.1.2.4, update to a version that includes the necessary security fixes to restrict unauthorized access to tables. For Actian Matrix versions 5.2.x through 5.2.0.1, apply configuration changes to enforce strict access controls and prevent unauthorized execution of UPDATE statements.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-3993

Affected Products

Actian Matrix

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3993 · Security Note
• http://supportservices.actian.com/images/pdf/Actian-SecAlert_May_2015_NO2_final.doc · Vendor Advisory
• http://securityfocus.com/bid/75187 · Note