CVE-2006-5675 - Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2

CVE-2006-5675

Summary

Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts. This vulnerability is addressed in the following product release: Pentaho, Business Intelligence Suite, 1.2 RC3 (1.2.0.470-RC3)

References

Vulnerable Configurations

cpe:2.3:a:pentaho:business_intelligence_suite:1.2_rc2:*:*:*:*:*:*:*
cpe:2.3:a:pentaho:business_intelligence_suite:1.2_rc2:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 20-07-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	20806
confirm	http://sourceforge.net/project/shownotes.php?group_id=140317&release_id=456313
vupen	ADV-2006-4252
xf	pentaho-bi-unspecified-sql-injection(39999)

Last major update

20-07-2017 - 01:33

Published

03-11-2006 - 02:07

Last modified

20-07-2017 - 01:33