NVD

Id
44013  
Name
CVE-2012-2171  
Description
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a state_viewmodulelog action to the ModuleServlet URI.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-22  
Modified Date
2012-06-22  
Seq
2012-2171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221229 44013 CVE-2012-2171 http://www.ibm.com/connections/blogs/PSIRT/entry/secbulletin_stg-storage_cve-2012-2171_cve-2012-2172  View
221230 44013 CVE-2012-2171 http://www.zeroscience.mk/codes/ibmssdssmp_sqlixss.txt  View
221231 44013 CVE-2012-2171 ssds-smp-sql-injection(75236)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27149 JVNDB-2012-002856 IBM System Storage DS Storage Manager における SQL インジェクションの脆弱性 IBM System Storage DS シリーズデバイス上で稼働する IBM System Storage DS Storage Manager の Storage Manager Profiler 内の ModuleServlet.do には、SQL インジェクションの脆弱性が存在します。 CVE-2012-2171 55409 CVE-2012-2171 44013 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002856.html 2012-06-20 2012-06-26 View