SQL Injection in Broadcom Release Automation

CVE-2014-8248

SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query.

Vulnerability class: SQL Injection

EPSS: 0.016 (73.4th percentile) — read the EPSS interpretation.

Affected products

Broadcom Release_automation
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
cret@cert.org (mailing-list, x_refsource_FULLDISC)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cret@cert.org (mailing-list, x_refsource_BUGTRAQ)
cret@cert.org (vdb-entry, x_refsource_SECTRACK)