PT-2018-2742 · Dr.Web · Dr.Web Enterprise Security Suite

Publicado

2018-12-20

·

Atualizado

2018-12-20

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite (affected versions not specified)
Description The issue exists due to a lack of protection for the web page structure in the "Security Center" component. This could allow a remote attacker to execute arbitrary HTML code in the user's browser by placing it in the username field on the "Administration->Administrators" tab.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2019-01718

Produtos afetados

Dr.Web Enterprise Security Suite