PT-2008-6454 · Ibm · Ibm Rational Clearcase

Publicado

2008-12-05

·

Atualizado

2017-08-08

·

CVE-2008-5330

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 7.0.0 through 7.0.0.3 IBM Rational ClearCase version 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3
Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO of a URI associated with a VOB page, due to multiple cross-site scripting (XSS) vulnerabilities in the web interface of the ClearCase RWP server.
Recommendations For IBM Rational ClearCase versions 7.0.0 through 7.0.0.3, update to version 7.0.0.4 or later. For IBM Rational ClearCase version 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, update to version 7.0.1.3 or later.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5330

Produtos afetados

Ibm Rational Clearcase