Lucene search

IbmCVE-2013-6321

HistoryJan 10, 2014 - 12:02 p.m.

CVE-2013-6321

2014-01-1012:02:51

CWE-89

ibm

web.nvd.nist.gov

ibm

atlas

ediscovery

process management

disposal

governance management

global retention policy

schedule management

sql injection

vulnerability

nvd

cve-2013-6321

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.003

Percentile

70.0%

JSON

SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

ibmatlas_ediscovery_process_managementRange≤6.0.1.5

ibmatlas_ediscovery_process_managementMatch6.0.2

ibmatlas_suiteMatch-

ibmdisposal_and_governance_management_for_itRange≤6.0.1.5

ibmdisposal_and_governance_management_for_itMatch6.0.2

ibmglobal_retention_policy_and_schedule_managementRange≤6.0.1.5

ibmglobal_retention_policy_and_schedule_managementMatch6.0.2

VendorProductVersionCPE
ibmatlas_ediscovery_process_management*cpe:2.3:a:ibm:atlas_ediscovery_process_management:*:*:*:*:*:*:*:*
ibmatlas_ediscovery_process_management6.0.2cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.2:*:*:*:*:*:*:*
ibmatlas_suite-cpe:2.3:a:ibm:atlas_suite:-:*:*:*:*:*:*:*
ibmdisposal_and_governance_management_for_it*cpe:2.3:a:ibm:disposal_and_governance_management_for_it:*:*:*:*:*:*:*:*
ibmdisposal_and_governance_management_for_it6.0.2cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.2:*:*:*:*:*:*:*
ibmglobal_retention_policy_and_schedule_management*cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:*:*:*:*:*:*:*:*
ibmglobal_retention_policy_and_schedule_management6.0.2cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	atlas_ediscovery_process_management	*	cpe:2.3:a:ibm:atlas_ediscovery_process_management::::::::
ibm	atlas_ediscovery_process_management	6.0.2	cpe:2.3:a:ibm:atlas_ediscovery_process_management:6.0.2:::::::*
ibm	atlas_suite	-	cpe:2.3:a:ibm:atlas_suite:-:::::::*
ibm	disposal_and_governance_management_for_it	*	cpe:2.3:a:ibm:disposal_and_governance_management_for_it::::::::
ibm	disposal_and_governance_management_for_it	6.0.2	cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.2:::::::*
ibm	global_retention_policy_and_schedule_management	*	cpe:2.3:a:ibm:global_retention_policy_and_schedule_management::::::::
ibm	global_retention_policy_and_schedule_management	6.0.2	cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.2:::::::*

References

osvdb.org/101856

www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334

www.securityfocus.com/bid/64749

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.003

Percentile

70.0%

JSON

Related for CVE-2013-6321