PT-2013-6299 · Esri · Esri Arcgis For Server

CVE-2013-7232

·

Publicado

2013-12-30

·

Atualizado

2024-07-11

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ESRI ArcGIS for Server versions through 10.2
Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service. This can be exploited by providing malicious input to the service, potentially leading to unauthorized access or data manipulation.
Recommendations For ESRI ArcGIS for Server versions through 10.2, update to a version later than 10.2 to resolve the issue. As a temporary workaround, consider restricting access to the map or feature service to minimize the risk of exploitation.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-7232

Produtos afetados

Esri Arcgis For Server