CVE-2013-0517

CWE-78 — OS Command Injection5 documents5 sources

Severity

7.8HIGH

EPSS

0.1%

top 68.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Sterling External Authentication Server

Timeline

PublishedFeb 11

Latest updateMay 5

Description

A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/sterling_external_authentication_server4 versions+3

▶NVDibm/sterling_external_authentication_server4 versions+3

🔴Vulnerability Details

GHSA

GHSA-jq67-2wg6-5wgp: A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2↗2022-05-05

▶

CVEList

CVE-2013-0517: A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2↗2020-02-11

▶

💥Exploits & PoCs

Exploit-DB

Xpient - Cash Drawer Operation↗2013-06-05

▶

💬Community

Bugzilla

CVE-2013-6470 openstack foreman-installer: insecure defaults↗2014-01-13

▶