PT-2007-6690 · Rsa · Rsa Keon Registration Authority Web Interface

Publicado 2007-10-29 · Atualizado 2018-10-15 · CVE-2007-5703

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RSA KEON Registration Authority Web Interface version 1.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in specific components of the RSA KEON Registration Authority Web Interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML, potentially leading to unauthorized actions on the affected system. The exact vectors through which the attacks can be carried out are not specified.

Recommendations For RSA KEON Registration Authority Web Interface version 1.0, consider disabling the Request-spk.xuda and Add-msie-request.xuda components until a patch is available to prevent potential exploitation of the XSS vulnerabilities.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5703

Produtos afetados

Rsa Keon Registration Authority Web Interface

Referências · 11

• http://vupen.com/english/advisories/2007/3658 · Nota
• http://osvdb.org/38298 · Nota
• http://gamasec.net/english/gs07-02.html · Nota
• http://secunia.com/advisories/27384 · Nota
• http://kb.cert.org/vuls/id/342793 · Nota
• http://securityfocus.com/bid/26196 · Nota
• http://osvdb.org/38299 · Nota
• http://securityreason.com/securityalert/3314 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5703 · Nota de Segurança
• http://securityfocus.com/archive/1/482729/100/0/threaded · Nota
• http://securitytracker.com/id?1018856 · Nota