PT-2012-3630 · Microsoft · Visual Studio Team Foundation Server

Sunil Yadav · Publicado 2012-09-11 · Atualizado 2018-10-12 · CVE-2012-1892

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio Team Foundation Server 2010 SP1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Microsoft Visual Studio Team Foundation Server 2010 SP1, update to a version that includes the fix for this issue to prevent exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-1892

Produtos afetados

Visual Studio Team Foundation Server

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1892 · Nota de Segurança
• http://securitytracker.com/id?1027511 · Nota
• http://us-cert.gov/cas/techalerts/TA12-255A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779 · Nota
• http://securityfocus.com/bid/55409 · Nota
• http://secunia.com/advisories/50463 · Nota