CVE-2013-6331

published 2014-03-05

CVE-2013-6331: SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management…

medium 6.5 CVSS 3.1

AV N AC L Au S C P I P A P

SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6302.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	algo_one	—	—
ibm	algo_one	—	—
ibm	algo_one	—	—
ibm	algo_one	—	—
ibm	algo_one	—	—
ibm	algo_one	—	—

CWE-89