PT-2012-5638 · Zoho · Zoho Manageengine Firewall Analyzer

Publicado

2012-09-10

·

Atualizado

2017-08-29

·

CVE-2012-4889

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer version 7.2
Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved by manipulating specific parameters in various API endpoints, including createAnomaly.do, mindex.do, index2.do, and syslogViewer.do. The vulnerable parameters are:
  • subTab and tab in createAnomaly.do,
  • url, subTab, and tab in mindex.do,
  • tab in index2.do,
  • port in syslogViewer.do.
Recommendations For ManageEngine Firewall Analyzer version 7.2, update to a version that includes a fix for this issue, as using outdated software can pose significant security risks. As a temporary workaround, consider restricting access to the affected API endpoints, such as createAnomaly.do, mindex.do, index2.do, and syslogViewer.do, to minimize the risk of exploitation. Avoid using the vulnerable parameters subTab, tab, url, and port in the respective API endpoints until the issue is resolved.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-4889

Produtos afetados

Zoho Manageengine Firewall Analyzer