{"id":"CVE-2018-13824","state":"PUBLISHED","title":"Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection","description":"Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.","publishedAt":"2018-08-30T14:00:00.000Z","updatedAt":"2024-09-17T02:00:43.300Z","severity":null,"assigner":"ca","products":["CA Technologies PPM"],"affected":[{"vendor":"CA Technologies","product":"PPM","versions":[{"version":"15.3 and earlier","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/105297","https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:17.855Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/13xxx/CVE-2018-13824.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-13824","state":"PUBLISHED","datePublished":"2018-08-30T14:00:00.000Z","dateUpdated":"2024-09-17T02:00:43.300Z","assignerShortName":"ca","assignerOrgId":"e291eae9-7c0a-46ac-ba7d-5251811f8b7f","dateReserved":"2018-07-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks."}],"affected":[{"vendor":"CA Technologies","product":"PPM","versions":[{"version":"15.3 and earlier","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/105297","name":"105297","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"SQL Injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ca","dateUpdated":"2018-09-08T09:57:01.000Z","orgId":"e291eae9-7c0a-46ac-ba7d-5251811f8b7f"},"datePublic":"2018-08-29T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vuln@ca.com","DATE_PUBLIC":"2018-08-29T00:00:00","ID":"CVE-2018-13824","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"PPM","version":{"version_data":[{"version_value":"15.3 and earlier"}]}}]},"vendor_name":"CA Technologies"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"SQL Injection"}]}]},"references":{"reference_data":[{"name":"105297","refsource":"BID","url":"http://www.securityfocus.com/bid/105297"},{"name":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html","refsource":"CONFIRM","url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/105297","name":"105297","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180829-01--security-notice-for-ca-ppm.html","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:14:47.286Z"}}]}}}