Soluzioni per la vulnerabilità

La Scansione Vulnerabilità periodica di Nimsoft Cloud Monitor verifica le vulnerabilità riportate qui sotto. Per visualizzare le soluzioni per la vulnerabilità più recenti scansionate da WatchMouse, visitare la pagina sulla panoramica delle Soluzioni per la vulnerabilità

Categoria: CGI abuses : XSS Fattore di rischio: Medium Aggiunto il: 16 mar 2010
Synopsis:

A web application on the remote host has a cross-site scripting vulnerability.

Description:

The version of IBM WebSphere Portal / IBM Lotus Web Content Management running on the remote host has a cross-site scripting vulnerability. The query string passed to login.php is not properly
sanitized.

A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution of arbitrary script code.

See also:

http://www.hacktics.com/content/advisories/AdvIBM20100224.html
http://archives.neohapsis.com/archives/bugtraq/2010-02/0226.html
http://www-01.ibm.com/support/docview.wss?uid=swg21421469

Solution:

Apply the relevant fix referenced in the IBM advisory.

Risk factor:

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)