{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eEnterpriseDB Postgres Plus Advanced  Server 8.4.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans le composant DBA Management Server\nd\u0027EnterpriseDB Postgres Plus Advanced Server. Une erreur permet de\ncontourner le m\u00e9canisme d\u0027authentification pr\u00e9alable \u00e0 l\u0027acc\u00e8s \u00e0 la\nconsole web ou JBoss et, \u00e0 un utilisateur malveillant, d\u0027ex\u00e9cuter du\ncode arbitraire \u00e0 distance.\n\n## Solution\n\nCharger le Build 39 d\u0027EnterpriseDB Postgres Plus Advanced Server au\nmoyen du syst\u00e8me de mise \u00e0 jour StackBuilder Plus.\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2011-03-09T00:00:00",
  "last_revision_date": "2011-03-09T00:00:00",
  "links": [
    {
      "title": "Site de t\u00e9l\u00e9chargement d\u0027EnterpriseDB Postgres Plus    Advanced Server :",
      "url": "http://www.enterprisedb.com/downloads/postgres-postgresql-downloads"
    }
  ],
  "reference": "CERTA-2011-AVI-139",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-03-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans EnterpriseDB Postgres Plus Advanced Server permet\n\u00e0 un utilisateur malveillant d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans EnterpriseDB Postgres Plus Advanced Server",
  "vendor_advisories": []
}