PT-2006-4454 · Fujitsu · Fujitsu Serverview

Publicado 2006-07-13 · Atualizado 2008-09-05 · CVE-2006-3579

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fujitsu ServerView versions 2.50 through 3.60L98 Fujitsu ServerView versions 4.10L11 through 4.11L81

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of user sessions.

Recommendations For versions 2.50 through 3.60L98, update to a version later than 3.60L98 to resolve the issue. For versions 4.10L11 through 4.11L81, update to a version later than 4.11L81 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-3579

Produtos afetados

Fujitsu Serverview

Referências · 7

• http://jvn.jp/jp/JVN%2376686161/index.html · Correção
• http://osvdb.org/27105 · Nota
• http://securityfocus.com/bid/18950 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3579 · Nota de Segurança
• http://software.fujitsu.com/jp/security/vulnerabilities/jvn-73368472-76686161.html · Correção
• http://jvn.jp/jp/JVN%2373368472/index.html · Correção
• http://secunia.com/advisories/21011 · Aviso do Fabricante