PT-2010-5318 · Attachmate · Attachmate Reflection For The Web

Publicado 2010-11-01 · Atualizado 2017-08-17 · CVE-2010-4146

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Attachmate Reflection for the Web versions 10.1.569 and earlier Attachmate Reflection for the Web 2008 R1 Attachmate Reflection for the Web 9.6 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For Attachmate Reflection for the Web versions 10.1.569 and earlier, update to a version later than 10.1.569. For Attachmate Reflection for the Web 2008 R1, update to a version later than 2008 R1. For Attachmate Reflection for the Web 9.6 and earlier, update to a version later than 9.6.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-4146

Produtos afetados

Attachmate Reflection For The Web

Referências · 6

• http://secunia.com/advisories/41869 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62564 · Nota
• http://osvdb.org/68637 · Nota
• http://support.attachmate.com/techdocs/1704.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4146 · Nota de Segurança
• http://securityfocus.com/bid/44123 · Nota