PT-2013-2434 · Ibm · Ibm Document Connect For Application Support Facility

Publicado 2013-04-27 · Atualizado 2017-08-29 · CVE-2013-0572

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Baixa

Vetor base

AV:A/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Document Connect for Application Support Facility (DC4ASF) versions prior to 1.0.0.1218

Description The issue allows remote authenticated users to inject content and conduct phishing attacks via unspecified vectors, due to a cross-site scripting (XSS) vulnerability. This enables attackers to potentially deceive users into revealing sensitive information.

Recommendations For versions prior to 1.0.0.1218, update to version 1.0.0.1218 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-0572

Produtos afetados

Ibm Document Connect For Application Support Facility

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-0572 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21635328 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83247 · Nota