PT-2015-1650 · Ibm · Ibm Websphere Portal

Publicado 2015-07-14 · Atualizado 2017-09-22 · CVE-2015-1944

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF16 IBM WebSphere Portal versions 8.5.0 through 8.5.0 CF05

Description The issue exists due to insufficient protection of the web page structure. It allows a remote attacker to inject arbitrary web or HTML code using a specially crafted URL. This is a cross-site scripting (XSS) issue, which can be exploited by remote authenticated users.

Recommendations For IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF16, update to version 8.0.0.1 CF17 or later. For IBM WebSphere Portal versions 8.5.0 through 8.5.0 CF05, update to version 8.5.0 CF06 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2015-10996

CVE-2015-1944

Produtos afetados

Ibm Websphere Portal

Referências · 7

• http://securityfocus.com/bid/75478 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1944 · Nota
• https://bdu.fstec.ru/vul/2015-10996 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21958024 · Aviso do Fabricante
• http://securitytracker.com/id/1032970 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1944 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI40341 · Aviso do Fabricante