CVE-2013-0517: OS Command Injection
Published Feb 11, 2020
·Updated
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.
Affected Software
4 affected components
IBM Sterling External Authentication Server=2.2.0
IBM Sterling External Authentication Server=2.3.01
IBM Sterling External Authentication Server=2.4.0
IBM Sterling External Authentication Server=2.4.1
Event History
Feb 11, 2020
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2013-0517?
The severity of CVE-2013-0517 is high with a CVSS score of 7.8.
2
What is the affected software for CVE-2013-0517?
The affected software for CVE-2013-0517 is IBM Sterling External Authentication Server versions 2.2.0, 2.3.01, 2.4.0, and 2.4.1.
3
How does the vulnerability in CVE-2013-0517 work?
The vulnerability in CVE-2013-0517 allows a local malicious user to execute arbitrary code via an unspecified OS command.
4
Are there any known fixes for CVE-2013-0517?
Yes, IBM has addressed the vulnerability in their security bulletin linked in the references.
5
Where can I find more information about CVE-2013-0517?
You can find more information about CVE-2013-0517 in the SecurityFocus and IBM blogs references.