PT-2016-3797 · Ibm · Ibm Infosphere Master Data Management

Publicado 2016-02-15 · Atualizado 2016-03-10 · CVE-2015-7492

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1

Description A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This affects the Reference Data Management (RDM) component.

Recommendations For version 10.1, update to a version that includes the fix for this issue. For version 11.0, apply FP5 or later to resolve the issue. For version 11.3, consider upgrading to a later version that includes the necessary security patches. For version 11.4, apply the relevant security fix or upgrade to a later version. For version 11.5, apply FP1 or later to address the vulnerability. As a temporary workaround, consider restricting access to crafted URLs to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-7492

Produtos afetados

Ibm Infosphere Master Data Management

Referências · 2

• http://www-01.ibm.com/support/docview.wss?uid=swg21974981 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7492 · Nota de Segurança