PT-2008-6242 · Novell · Novell User Application+1

Publicado 2008-11-14 · Atualizado 2012-10-31 · CVE-2008-5095

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell User Application versions 3.0.1, 3.5.0, and 3.5.1 Identity Manager Roles Based Provisioning Module versions 3.6.0 and 3.6.1

Description The issue allows remote attackers to inject arbitrary web script or HTML, which is a result of a cross-site scripting (XSS) vulnerability. This can occur via unknown vectors.

Recommendations For Novell User Application versions 3.0.1, 3.5.0, and 3.5.1, update to a version that contains a fix for this issue. For Identity Manager Roles Based Provisioning Module versions 3.6.0 and 3.6.1, update to a version that contains a fix for this issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5095

Produtos afetados

Novell Identity Manager Roles Based Provisioning Module

Novell User Application

Referências · 5

• http://securitytracker.com/id?1020793 · Nota
• http://securityfocus.com/bid/30947 · Nota
• http://securitytracker.com/id?1020792 · Nota
• http://novell.com/support/viewContent.do?externalId=7001157&sliceId=1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5095 · Nota de Segurança