SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2011-2467

SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.

MEDIUM 5.8EPSS 0.72%

Does this matter?

Lower severity and a low EPSS score (0.72%). Track it; it rarely justifies an emergency change on its own.

Description

SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0
5.8 MEDIUMAV:A/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.72% probability · 52th percentile
CISA KEV
Not listed
Weakness
CWE-89
Affected
likewise/likewise open
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.