PT-2007-6294 · Arbor Networks · Arbor Networks Peakflow Sp

Publicado 2007-10-04 · Atualizado 2017-07-29 · CVE-2007-5211

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Arbor Networks Peakflow SP versions 3.5.1 through 3.5.1 before patch 14 Arbor Networks Peakflow SP versions 3.6.1 through 3.6.1 before patch 5

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests when scope accounts are enabled.

Recommendations For Arbor Networks Peakflow SP version 3.5.1, apply patch 14 to resolve the issue. For Arbor Networks Peakflow SP version 3.6.1, apply patch 5 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5211

Produtos afetados

Arbor Networks Peakflow Sp

Referências · 4

• http://secunia.com/advisories/27003 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5211 · Nota de Segurança
• http://securityfocus.com/bid/25910 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36926 · Nota