CVE Vulnerabilities

CVE-2013-6859

Improper Authentication

Published: Nov 23, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
8.5 HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Adaptive_server_enterprise Sybase 15.0.3 (including) 15.0.3 (including)
Adaptive_server_enterprise Sybase 15.5 (including) 15.5 (including)
Adaptive_server_enterprise Sybase 15.7 (including) 15.7 (including)

Potential Mitigations

References