Computer Associates CleverPath Portal Local SQL Injection Vulnerability

Bugtraq ID: 23671
Class: Input Validation Error
CVE: CVE-2007-2230
Remote: Yes
Local: No
Published: Apr 26 2007 12:00AM
Updated: May 02 2007 09:09PM
Credit: Irene Abezgauz of Hacktics is credited with the discovery of this issue.
Vulnerable: Computer Associates Unicenter Management Portal 3.1
Computer Associates Unicenter Management Portal 2.0
Computer Associates Unicenter Management Portal 11.0
Computer Associates Unicenter Database Management Portal 11.1
Computer Associates Unicenter Database Management Portal 11
Computer Associates Unicenter Asset Portfolio Management 11.0
Computer Associates eTrust Security Command Center 8
Computer Associates eTrust Security Command Center 1.0
Computer Associates CleverPath Portal 4.7
Computer Associates CleverPath Portal 4.71
Computer Associates CleverPath Portal 4.51
Computer Associates CleverPath Aion BPM 10.2
Computer Associates CleverPath Aion BPM 10.1
Computer Associates CleverPath Aion BPM 10
Computer Associates BrightStor Portal 11.1
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus