PT-2011-3000 · Microsoft · Windows Server 2008 R2+1

Sven Taute · Publicado 2011-08-10 · Atualizado 2020-09-28 · CVE-2011-1263

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1

Description A cross-site scripting (XSS) issue exists in the logon page of Remote Desktop Web Access (RD Web Access), allowing remote attackers to inject arbitrary web script or HTML via the URI.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-1263

Produtos afetados

Windows Server 2008 R2

Remote Desktop Web Access

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1263 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12792 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-061 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA11-221A.html · Nota