CVE-2018-13824: SQL Injection
Published Aug 30, 2018
·Updated
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.
Affected Software
5 affected components
Broadcom Project Portfolio Management<=14.3
Broadcom Project Portfolio Management=14.4
Broadcom Project Portfolio Management=15.1
CA Project Portfolio Management=15.2-cp5
CA Project Portfolio Management=15.3-cp2
Remediation
Event History
Aug 30, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-13824?
CVE-2018-13824 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2018-13824?
To fix CVE-2018-13824, you should upgrade to CA PPM version 15.3 CP3 or later.
3
What software is affected by CVE-2018-13824?
CVE-2018-13824 affects CA PPM 14.3 and lower, as well as specific versions of 14.4, 15.1, and 15.2 CP5 and below, and 15.3 CP2 and below.
4
What type of attack can be executed due to CVE-2018-13824?
CVE-2018-13824 allows attackers to perform SQL injection attacks, potentially compromising sensitive data.
5
Is there a workaround for CVE-2018-13824?
There are no known workarounds for CVE-2018-13824; patching to a fixed version is recommended.