PT-2014-2166 · Suse · Suse Studio Extension For System Z+1

Publicado 2014-04-16 · Atualizado 2014-04-17 · CVE-2011-4193

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE Studio Onsite versions 1.2 through 1.2.1 SUSE Studio Extension for System z versions 1.2 through 1.2.1

Description A cross-site scripting (XSS) issue exists in the overlay files tab, allowing remote attackers to inject arbitrary web script or HTML via a crafted application. This is related to cloning.

Recommendations For SUSE Studio Onsite version 1.2, update to version 1.2.1 to resolve the issue. For SUSE Studio Extension for System z version 1.2, update to version 1.2.1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-4193

Produtos afetados

Suse Studio Extension For System Z

Suse Studio Onsite

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4193 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html · Aviso do Fabricante