PT-2013-2736 · Apache+2 · Apache+2

Publicado 2013-05-22 · Atualizado 2013-05-22 · CVE-2013-0942

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Internet Information Services EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Apache

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Internet Information Services, update to version 7.1.1 or later. For EMC RSA Authentication Agent versions 7.1 through 7.1.1 for Web for Apache, update to version 7.1.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-0942

Produtos afetados

Apache

Emc Rsa Authentication Agent

Internet Information Services

Referências · 2

• http://archives.neohapsis.com/archives/bugtraq/2013-05/0043.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0942 · Nota de Segurança