CVE-2012-2576

Опубликовано: 20 дек. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.

Ссылки

http://www.exploit-db.com/exploits/18818
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/18833
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/51639
Third Party Advisory
VDB Entry
http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72680
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/18818
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/18833
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/51639
Third Party Advisory
VDB Entry
http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72680
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:solarwinds:backup_profiler:*:*:*:*:*:*:*:*

Версия до 5.1.2 (исключая)

cpe:2.3:a:solarwinds:storage_manager:*:*:*:*:*:*:*:*

Версия до 5.1.2 (исключая)

cpe:2.3:a:solarwinds:storage_profiler:*:*:*:*:*:*:*:*

Версия до 5.1.2 (исключая)

EPSS

Процентиль: 97%

0.41082

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-m3hc-px32-r3pc

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.41082

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-89