PT-2011-3082 · Ibm · Websphere Service Registry/Repository

Publicado

2011-08-11

·

Atualizado

2017-08-17

·

CVE-2011-1357

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository (WSRR) versions 6.3 through 6.3.0.5 IBM WebSphere Service Registry and Repository (WSRR) versions 7.0 through 7.0.0.5 IBM WebSphere Service Registry and Repository (WSRR) versions 7.5 through 7.5.0.1
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
Recommendations For versions 6.3 through 6.3.0.5, update to version 6.3.0.5 or later. For versions 7.0 through 7.0.0.5, update to version 7.0.0.5 or later. For versions 7.5 through 7.5.0.1, update to version 7.5.0.1 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-1357

Produtos afetados

Websphere Service Registry/Repository