CVE-2013-1613: SQL Injection
First published: Mon Jul 08 2013(Updated: )
SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Security Information Manager Appliance | =4.7.0 | |
| Symantec Security Information Manager Appliance | =4.7.1 | |
| Symantec Security Information Manager Appliance | =4.7.2 | |
| Symantec Security Information Manager Appliance | =4.7.3 | |
| Symantec Security Information Manager Appliance | =4.7.4 | |
| Symantec Security Information Manager Appliance | =4.8.0 | |
| Symantec Security Information Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1613?
CVE-2013-1613 has a medium severity rating due to its potential for SQL injection by authenticated users.
How do I fix CVE-2013-1613?
To mitigate CVE-2013-1613, upgrade to Symantec Security Information Manager version 4.8.1 or later.
Who is affected by CVE-2013-1613?
CVE-2013-1613 affects remote authenticated users of Symantec Security Information Manager versions 4.7.x and 4.8.x before 4.8.1.
What exploitation vector is used in CVE-2013-1613?
CVE-2013-1613 can be exploited via unspecified vectors that allow execution of arbitrary SQL commands.
Is CVE-2013-1613 present in all versions of Symantec Security Information Manager?
No, CVE-2013-1613 is specifically present in versions 4.7.x and 4.8.x prior to 4.8.1.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/symantec
- canonical/symantec security information manager appliance
- version/symantec security information manager appliance/4.7.0
- version/symantec security information manager appliance/4.7.1
- version/symantec security information manager appliance/4.7.2
- version/symantec security information manager appliance/4.7.3
- version/symantec security information manager appliance/4.7.4
- version/symantec security information manager appliance/4.8.0
- canonical/symantec security information manager