PT-2018-4027

CVE-2011-0467

Publicado

2018-06-07

Atualizado

2020-01-24

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUSE Studio Onsite versions prior to 1.0.3-0.18.1 SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1

Description A vulnerability in SUSE Studio Onsite allows authenticated users to execute arbitrary SQL statements via SQL injection. This issue affects the listing of available software.

Recommendations For SUSE Studio Onsite versions prior to 1.0.3-0.18.1, update to version 1.0.3-0.18.1 or later. For SUSE Studio Onsite 1.1 Appliance versions prior to 1.1.2-0.25.1, update to version 1.1.2-0.25.1 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Matthias Weckbecker

Thomas Biege

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Identificadores relacionados