PT-2013-4821 · Ibm · Ibm Domino

Publicado 2013-11-08 · Atualizado 2017-08-29 · CVE-2013-4055

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0

Description A cross-site scripting (XSS) issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For IBM Domino versions 8.5 through 9.0, consider restricting access to the webadmin.nsf component until a fix is available. As a temporary workaround, limit the ability of remote authenticated users to inject web script or HTML in the Domino Web Administrator.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4055

Produtos afetados

Ibm Domino

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/86544 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21652988 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4055 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4055 · Nota de Segurança