Lucene search

K
cveIbmCVE-2013-6331
HistoryMar 05, 2014 - 11:55 a.m.

CVE-2013-6331

2014-03-0511:55:03
CWE-89
ibm
web.nvd.nist.gov
28
ibm
algo one
sql injection
vulnerability
uds
acsweb
algo security
access control management
algowebapps

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

47.4%

SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6302.

Affected configurations

Nvd
Node
ibmalgo_oneMatch4.7.0
OR
ibmalgo_oneMatch4.7.1
OR
ibmalgo_oneMatch4.8.0
OR
ibmalgo_oneMatch4.9.0
OR
ibmalgo_oneMatch4.9.1
OR
ibmalgo_oneMatch5.0.0
VendorProductVersionCPE
ibmalgo_one4.7.0cpe:2.3:a:ibm:algo_one:4.7.0:*:*:*:*:*:*:*
ibmalgo_one4.7.1cpe:2.3:a:ibm:algo_one:4.7.1:*:*:*:*:*:*:*
ibmalgo_one4.8.0cpe:2.3:a:ibm:algo_one:4.8.0:*:*:*:*:*:*:*
ibmalgo_one4.9.0cpe:2.3:a:ibm:algo_one:4.9.0:*:*:*:*:*:*:*
ibmalgo_one4.9.1cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*
ibmalgo_one5.0.0cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

47.4%

Related for CVE-2013-6331