PT-2014-3958 · Ibm · Ibm Tivoli Service Automation Manager

Publicado 2014-10-07 · Atualizado 2017-08-29 · CVE-2014-0940

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Service Automation Manager version 7.2.2.2

Description The issue involves multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved through vectors involving the REST API or the Self Service UI.

Recommendations For IBM Tivoli Service Automation Manager version 7.2.2.2, apply the fix 7.2.2.2-TIV-TSAM-LA0041 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-0940

Produtos afetados

Ibm Tivoli Service Automation Manager

Referências · 6

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV47175 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0940 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92381 · Nota
• http://securityfocus.com/bid/70247 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV46530 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21686189 · Aviso do Fabricante