Hitachi JP1/NETM/DM Manager Products Unspecified SQL Injection Vulnerability

Bugtraq ID:	24903
Class:	Input Validation Error
CVE:	CVE-2007-3793
Remote:	Yes
Local:	No
Published:	Jul 13 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	The vendor reported this issue.
Vulnerable:	Hitachi NETM/DM 02-03-/F(*1) Hitachi NETM/DM 02-00 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-53-09 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-00 Hitachi JP1/NETM/DM Manager 08-10 Hitachi JP1/NETM/DM Manager 08-02-01 Hitachi JP1/NETM/DM Manager 08-00 Hitachi JP1/NETM/DM Manager 07-53-09 Hitachi JP1/NETM/DM Manager 07-50 Hitachi JP1/NETM/DM Manager 07-00 Hitachi JP1/NETM/DM Manager 06-72-/G Hitachi JP1/NETM/DM Manager 06-00 Hitachi JP1/NETM/DM Manager 05-24-/E(*1) Hitachi JP1/NETM/DM Manager 03-00 Hitachi JP1/NETM/Asset Information Manager Smart Edition 01-00-/A(*1) Hitachi JP1/NETM/Asset Information Manager Smart Edition 01-00
Not Vulnerable:

Hitachi JP1/NETM/DM Manager Products Unspecified SQL Injection Vulnerability

Multiple Hitachi JP1/NETM/DM Manager products are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Hitachi JP1/NETM/DM Manager Products Unspecified SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

Hitachi JP1/NETM/DM Manager Products Unspecified SQL Injection Vulnerability

Solution:
The vendor has released updates that address this issue. Please see the referenced advisories for information on obtaining and installing these updates.

Hitachi JP1/NETM/DM Manager Products Unspecified SQL Injection Vulnerability

References:

• Hitachi Home Page (Hitachi)
  
• SQL Injection Vulnerability of JP1/NETM/DM Manager (Hitachi)