Security Bulletin: Multiple security vulnerabilities addressed in IBM Sterling External Authentication Server (CVE-2013-0514, CVE-2013-0517)

Abstract IBM Sterling External Authentication Server is vulnerable to code execution and information disclosure attacks. Content VULNERABILITY DETAILS CVE ID: CVE-2013-0517 DESCRIPTION: OS Command Execution via Command Line Adapter Application allows the administrator to configure an OS command t...

CVE-2013-0517

IBM Sterling External Authentication Server (SEAS) is affected by CVE-2013-0517: an OS command can be executed via the Command Line Adapter when an administrator configures a system command. Impact: local attacker with admin privileges could run arbitrary OS commands, compromising confidentiality...