|
|
Computer Associates CleverPath Portal Local SQL Injection Vulnerability
|
Bugtraq ID:
|
23671
|
|
Class:
|
Input Validation Error
|
|
CVE:
|
CVE-2007-2230
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Apr 26 2007 12:00AM
|
|
Updated:
|
May 02 2007 09:09PM
|
|
Credit:
|
Irene Abezgauz of Hacktics is credited with the discovery of this issue.
|
|
Vulnerable:
|
Computer Associates Unicenter Management Portal 3.1
Computer Associates Unicenter Management Portal 2.0
Computer Associates Unicenter Management Portal 11.0
Computer Associates Unicenter Database Management Portal 11.1
Computer Associates Unicenter Database Management Portal 11
Computer Associates Unicenter Asset Portfolio Management 11.0
Computer Associates eTrust Security Command Center 8
Computer Associates eTrust Security Command Center 1.0
Computer Associates CleverPath Portal 4.7
Computer Associates CleverPath Portal 4.71
Computer Associates CleverPath Portal 4.51
Computer Associates CleverPath Aion BPM 10.2
Computer Associates CleverPath Aion BPM 10.1
Computer Associates CleverPath Aion BPM 10
Computer Associates BrightStor Portal 11.1
|
|
|
|
Not Vulnerable:
|
|
|
|
