PT-2018-5628 · Dell Emc · Dell Emc Vnx2+2

Publicado 2018-01-04 · Atualizado 2018-02-07 · CVE-2017-14383

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Dell EMC VNX2 versions prior to 8.1.9.217 Dell EMC VNX1 versions prior to 7.1.80.8

Description: A reflected cross-site scripting issue affects the web server error page in VNX Control Station. This could allow a remote unauthenticated attacker to execute arbitrary HTML code in the user's browser session.

Recommendations: For Dell EMC VNX2 versions prior to 8.1.9.217, update to Operating Environment for File 8.1.9.217 or later. For Dell EMC VNX1 versions prior to 7.1.80.8, update to Operating Environment for File 7.1.80.8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-14383

Produtos afetados

Dell Emc Vnx1

Dell Emc Vnx2

Vnx Control Station

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-14383 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14383 · Nota de Segurança
• http://seclists.org/fulldisclosure/2017/Dec/87 · Nota