CVE-2011-1653: SQL Injection
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1653?
CVE-2011-1653 is classified as a high severity vulnerability due to its potential for remote code execution through SQL injection.
How do I fix CVE-2011-1653?
To fix CVE-2011-1653, update to the latest version of CA Total Defense r12 that includes the security patches addressing these SQL injection vulnerabilities.
What are the affected components in CVE-2011-1653?
The affected components in CVE-2011-1653 include the Unified Network Control (UNC) Server functionalities such as UnAssignFunctionalRoles and DeleteFilter.
Can CVE-2011-1653 be exploited remotely?
Yes, CVE-2011-1653 can be exploited remotely by attackers to execute arbitrary SQL commands on the affected server.
Which versions of CA Total Defense are affected by CVE-2011-1653?
CVE-2011-1653 affects CA Total Defense version r12 before SE2.