CVE-2012-0199

ALTO 7.5CVE-2012-0199 · Published 06/03/2012 · updated 16/06/2026

Em resumo

CVE-2012-0199 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta tivoli provisioning manager express for software distribution (ibm).
Chance de exploração nos próximos 30 dias (EPSS): 1.7%, maior que 76.7% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
tivoli provisioning manager express for software distribution ibm	`= 4.1.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, (2) the User.updateUserValue function in the register.do servlet, (3) the User.isExistingUser function in the logon.do servlet, (4) the Asset.getHWKey function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServlet) servlet, (6) the addAsset.do servlet, or (7) a crafted EG2 file.

References

Mais vulnerabilidades de tivoli provisioning manager express for software distribution

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free