PT-2012-2951 · Hitachi · Hitachi It Operations Director

Publicado 2012-01-24 · Atualizado 2017-08-29 · CVE-2012-0919

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hitachi IT Operations Director versions 02-50-01 through 02-50-07 Hitachi IT Operations Director versions 03-00 through 03-00-04 Hitachi IT Operations Director versions prior to 03-00-06

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of user sessions.

Recommendations For versions 02-50-01 through 02-50-07, update to version 03-00-06 or later. For versions 03-00 through 03-00-04, update to version 03-00-06 or later. For versions prior to 03-00-06, update to version 03-00-06 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-0919

Produtos afetados

Hitachi It Operations Director

Referências · 6

• http://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-001/index.html · Aviso do Fabricante
• http://secunia.com/advisories/47490 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72248 · Nota
• http://securityfocus.com/bid/51340 · Nota
• http://osvdb.org/78215 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0919 · Nota de Segurança