First published: Tue Feb 11 2020(Updated: )
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Sterling External Authentication Server | =2.2.0 | |
IBM Sterling External Authentication Server | =2.3.01 | |
IBM Sterling External Authentication Server | =2.4.0 | |
IBM Sterling External Authentication Server | =2.4.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2013-0517 is high with a CVSS score of 7.8.
The affected software for CVE-2013-0517 is IBM Sterling External Authentication Server versions 2.2.0, 2.3.01, 2.4.0, and 2.4.1.
The vulnerability in CVE-2013-0517 allows a local malicious user to execute arbitrary code via an unspecified OS command.
Yes, IBM has addressed the vulnerability in their security bulletin linked in the references.
You can find more information about CVE-2013-0517 in the SecurityFocus and IBM blogs references.