CVE-2013-6302: SQL Injection
SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6331.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6302?
CVE-2013-6302 is considered a high-severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2013-6302?
To fix CVE-2013-6302, update to the latest version of IBM Algo One that addresses the SQL injection vulnerability.
Who is affected by CVE-2013-6302?
CVE-2013-6302 affects authenticated users of IBM Algo One versions 4.7.0 through 5.0.0 and specific ACSWeb applications.
What types of attacks are possible with CVE-2013-6302?
CVE-2013-6302 allows attackers to execute arbitrary SQL commands, potentially leading to data manipulation or unauthorized access.
Is there a specific patch for CVE-2013-6302?
Yes, IBM has released patches in subsequent versions of Algo One to mitigate the risks associated with CVE-2013-6302.