PT-2018-4027 · Suse · Suse Studio Onsite

Matthias Weckbecker + 1 · Published 2018-06-07 · Updated 2020-01-24 · CVE-2011-0467

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUSE Studio Onsite versions prior to 1.0.3-0.18.1 SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1

Description A vulnerability in SUSE Studio Onsite allows authenticated users to execute arbitrary SQL statements via SQL injection. This issue affects the listing of available software.

Recommendations For SUSE Studio Onsite versions prior to 1.0.3-0.18.1, update to version 1.0.3-0.18.1 or later. For SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1, update to version 1.1.2-0.25.1 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-0467

Affected Products

Suse Studio Onsite

References · 3

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=675039 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0467 · Security Note
• https://suse.com/security/cve/CVE-2011-0467 · Note