medium6.5
CVE-2014-8248
SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arb…
Impact
SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Release Automation | through 4.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Dec/55
- http://securitytracker.com/id?1031375
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
- http://www.kb.cert.org/vuls/id/343060
- http://www.securityfocus.com/archive/1/534246/100/0/threaded
- http://seclists.org/fulldisclosure/2014/Dec/55
- http://securitytracker.com/id?1031375
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
- http://www.kb.cert.org/vuls/id/343060
- http://www.securityfocus.com/archive/1/534246/100/0/threaded