PT-2019-7241 · Sas · Sas Web Infrastructure Platform

Publicado 2019-01-17 · Atualizado 2019-01-24 · CVE-2015-9281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAS Web Infrastructure Platform versions prior to 9.4M3

Description The issue allows for reflected XSS on the Timeout page. This occurs due to a flaw in the Logon Manager component.

Recommendations For versions prior to 9.4M3, update to version 9.4M3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-9281

Produtos afetados

Sas Web Infrastructure Platform

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-9281 · Nota de Segurança
• http://support.sas.com/kb/55/537.html · Aviso do Fabricante