SQL Injection Vulnerability in CA PPM Versions 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below

SQL Injection Vulnerability in CA PPM Versions 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below

CVE-2018-13824 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.