CVE-2013-6321

{"id": "CVE-2013-6321", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-10T12:02:51.513", "references": [{"url": "http://osvdb.org/101856", "source": "psirt@us.ibm.com"}, {"url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/64749", "source": "psirt@us.ibm.com"}, {"url": "http://osvdb.org/101856", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/64749", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) allows remote attackers to execute arbitrary SQL commands via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de SQL en IBM Atlas eDiscovery Process Management 6.0.1.5 y anteriores versiones y 6.0.2, Disposal y Governance Management for IT 6.0.1.5 y anteriores y 6.0.2, y Global Retention Policy y Schedule Management 6.0.1.5 y anteriores versiones y 6.0.2 en IBM Atlas Suite (tambi\u00e9n conocido como Atlas Policy Suite) permite a atacantes remotos ejecutar comandos SQL arbitrarios a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T01:59:00.027", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:atlas_ediscovery_process_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A91B299-5218-4A60-97D3-3FD7E73E6CD4", "versionEndIncluding": "6.0.1.5"}, {"criteria": "cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E89916C9-0EA1-43D9-93AA-2DF395A8C491"}, {"criteria": "cpe:2.3:a:ibm:atlas_suite:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD5284A0-04C8-4E0D-83CF-4BB7D42E53E8"}, {"criteria": "cpe:2.3:a:ibm:disposal_and_governance_management_for_it:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4275BE22-CE0F-4F66-9723-D18FC3E68130", "versionEndIncluding": "6.0.1.5"}, {"criteria": "cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0BF4D8C-3619-4668-93A9-9B1DADD875B9"}, {"criteria": "cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "712DE98D-5713-44EE-BEFE-8A4F7FB648DD", "versionEndIncluding": "6.0.1.5"}, {"criteria": "cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46246951-8F50-40E8-8AEC-0773C48E8A54"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}