Vulnerability Description
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Suse | Studio Onsite | < 1.0.3-0.18.1 |
| Suse | Studio Onsite Appliance | < 1.1.2-0.25.1 |
Related Weaknesses (CWE)
References
- https://bugzilla.suse.com/show_bug.cgi?id=675039
- https://www.suse.com/security/cve/CVE-2011-0467/
- https://bugzilla.suse.com/show_bug.cgi?id=675039
- https://www.suse.com/security/cve/CVE-2011-0467/
FAQ
What is CVE-2011-0467?
CVE-2011-0467 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected ...
How severe is CVE-2011-0467?
CVE-2011-0467 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0467?
Check the references section above for vendor advisories and patch information. Affected products include: Suse Studio Onsite, Suse Studio Onsite Appliance.