CVE-2013-0511

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
https://exchange.xforce.ibmcloud.com/vulnerabilities/82344

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:::::*

History

No history.

Information

Published : 2013-03-29 16:09

Updated : 2024-02-28 12:00

NVD link : CVE-2013-0511

Mitre link : CVE-2013-0511

CVE.ORG link : CVE-2013-0511

JSON object : View

Products Affected

ibm

security_appscan

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2013-0511", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-03-29T16:09:01.117", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82344", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en IBM Security AppScan Enterprise v5.6 y v8.x anterior a v8.7 que permite a usuarios autenticados ejecutar c\u00f3digo arbitrario SQL a trav\u00e9s de par\u00e1metros sin especificar."}], "lastModified": "2017-08-29T01:33:04.480", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39FC4232-1329-41F1-BA0A-14132DCDB742"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1B610D1-259B-4302-B53C-122B28DC9C3E"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "118823C5-6169-41E3-BD9D-707A11ABF6D0"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FABD7F3A-218B-4C5B-9C59-B70DF12B2636"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46D2DFF5-9C7D-4DE6-BF50-6AF81384DF74"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13510F33-FB13-48FA-9D2C-82D633A3C49E"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5019192-0D6B-4BD3-9B51-F1B967F241DA"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8F320A3-9317-4FDA-B1FB-64B70393802D"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "757704EA-B054-4D1C-808F-4EFF34CDB4D9"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EE41CC5-24F1-44D3-A881-628B049C242C"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63B20082-EA17-4BE9-AC60-1B8DA726C4A5"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03408A0D-F784-49CC-8EDC-ACA017AA2524"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}