PT-2007-6508 · Ca · Ca Host-Based Intrusion Prevention System

Publicado 2007-10-22 · Atualizado 2021-04-09 · CVE-2007-5472

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: CA Host-Based Intrusion Prevention System (HIPS) versions prior to 8.0.0.93

Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer. This occurs due to improper handling of user input in the Server component.

Recommendations: For versions prior to 8.0.0.93, update to version 8.0.0.93 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5472

Produtos afetados

Ca Host-Based Intrusion Prevention System

Referências · 9

• http://vupen.com/english/advisories/2007/3547 · Nota
• http://osvdb.org/37998 · Nota
• http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-5472 · Nota de Segurança
• http://securityfocus.com/archive/1/482536/100/0/threaded · Nota
• http://secunia.com/advisories/27301 · Aviso do Fabricante
• http://securitytracker.com/id?1018839 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37285 · Nota
• http://securityfocus.com/bid/26134 · Nota