Command injection

2020-02-1118:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.3%

JSON

A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.

CPENameOperatorVersion
sterling_external_authentication_servereq2.4.0
sterling_external_authentication_servereq2.3.01
sterling_external_authentication_servereq2.2.0
sterling_external_authentication_servereq2.4.1

Name	Operator	Version
sterling_external_authentication_server	eq	2.4.0
sterling_external_authentication_server	eq	2.3.01
sterling_external_authentication_server	eq	2.2.0
sterling_external_authentication_server	eq	2.4.1

References

www.securityfocus.com/bid/59807

www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-2013-0517-4/