PT-2012-4167 · Red Hat+1 · Dogtag Certificate System+3

Publicado

2012-08-13

·

Atualizado

2023-02-13

·

CVE-2012-2662

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Red Hat Certificate System versions prior to 8.1.1 Dogtag Certificate System (affected versions not specified)
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2) End Entity pages.
Recommendations For Red Hat Certificate System versions prior to 8.1.1, update to version 8.1.1 or later. For Dogtag Certificate System, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CESA-2015_1347
CVE-2012-2662
RHSA-2012:1103
RHSA-2015:1347
RHSA-2015_1347

Produtos afetados

Centos
Dogtag Certificate System
Red Hat
Red Hat Certificate System