CVE-2018-13824

Опубликовано: 30 авг. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.

Ссылки

http://www.securityfocus.com/bid/105297
Third Party Advisory
VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105297
Third Party Advisory
VDB Entry
https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:project_portfolio_management:*:*:*:*:*:*:*:*

Версия до 14.3 (включая)

cpe:2.3:a:broadcom:project_portfolio_management:14.4:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:project_portfolio_management:15.1:*:*:*:*:*:*:*

cpe:2.3:a:ca:project_portfolio_management:15.2:cp5:*:*:*:*:*:*

cpe:2.3:a:ca:project_portfolio_management:15.3:cp2:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00706

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-78qh-chfj-3748