PT-2013-2061 · Microsoft · System Center Operations Manager

Publicado 2013-01-09 · Atualizado 2018-10-12 · CVE-2013-0010

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft System Center Operations Manager versions 2007 SP1 and R2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via crafted input. This can be exploited by sending malicious input to the web console.

Recommendations For Microsoft System Center Operations Manager 2007 SP1, update to a version that includes the fix for this issue. For Microsoft System Center Operations Manager 2007 R2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the web console to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-0010

Produtos afetados

System Center Operations Manager

Referências · 4

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16232 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0010 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA13-008A.html · Nota