Sårbarhetslösningar

Nimsoft Cloud Monitor periodiska sårbarhetsskanning kontrollerar sårbarheten nedan. Om du vill se de senasta sårbarhetslösningarna som skannas av Nimsoft Cloud Monitor kan du gå till översikten med sårbarhetslösningar

Kategori: CGI abuses : XSS Riskfaktor: Medium Tillagt: 16 mar 2010
Synopsis:

A web application on the remote host has a cross-site scripting vulnerability.

Description:

The version of IBM WebSphere Portal / IBM Lotus Web Content Management running on the remote host has a cross-site scripting vulnerability. The query string passed to login.php is not properly
sanitized.

A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the execution of arbitrary script code.

See also:

http://www.hacktics.com/content/advisories/AdvIBM20100224.html
http://archives.neohapsis.com/archives/bugtraq/2010-02/0226.html
http://www-01.ibm.com/support/docview.wss?uid=swg21421469

Solution:

Apply the relevant fix referenced in the IBM advisory.

Risk factor:

Medium / CVSS Base Score : 4.3
(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)