Unscored CVE-2014-8248 EUVD-2014-8089GHSA-m9hc-j9pp-2gwf

SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated …

Published Dec 16, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query.

References

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx
20141216 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
VU#343060 third-party-advisory
20141215 CA20141215-01: Security Notice for CA LISA Release Automation mailing-list
1031375 vdb-entry