CVEvulnerability
CVE-2013-4461
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the "filtering table operator."
Affected configurations
• redhat enterprise mrg 2.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-1851.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1852.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1016263 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1851.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1852.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1016263 bugzilla.redhat.com