First published: Thu Jun 07 2018(Updated: )
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
Credit: meissner@suse.de
Affected Software | Affected Version | How to fix |
---|---|---|
Suse Studio Onsite Appliance | <1.1.2-0.25.1 | |
SUSE Studio Onsite | <1.0.3-0.18.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-0467 is a vulnerability in the listing of available software of SUSE Studio Onsite, which allows authenticated users to execute arbitrary SQL statements via SQL injection.
CVE-2011-0467 allows authenticated users to execute arbitrary SQL statements, potentially leading to unauthorized access and manipulation of data.
The severity level of CVE-2011-0467 is high with a CVSS score of 8.8.
Versions prior to 1.0.3-0.18.1 of SUSE Studio Onsite and versions up to 1.1.2-0.25.1 of SUSE Studio Onsite Appliance are affected by CVE-2011-0467.
To fix CVE-2011-0467, update your SUSE Studio Onsite to version 1.0.3-0.18.1 or later, and update SUSE Studio Onsite Appliance to version 1.1.2-0.25.1 or later.