PT-2013-6299 · Esri · Esri Arcgis For Server
CVE-2013-7232
·
Publicado
2013-12-30
·
Atualizado
2024-07-11
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ESRI ArcGIS for Server versions through 10.2
Description
The issue allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service. This can be exploited by providing malicious input to the service, potentially leading to unauthorized access or data manipulation.
Recommendations
For ESRI ArcGIS for Server versions through 10.2, update to a version later than 10.2 to resolve the issue. As a temporary workaround, consider restricting access to the map or feature service to minimize the risk of exploitation.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Esri Arcgis For Server