PT-2009-6317 · Ca · Ca Service Desk

Published 2009-12-09 · Updated 2009-12-10 · CVE-2009-4149

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA Service Desk version 12.1

Description A cross-site scripting (XSS) issue exists in the web interface, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

Recommendations For CA Service Desk version 12.1, update to a version that includes a fix for this issue, as no specific workaround is provided.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4149

Affected Products

Ca Service Desk

References · 3

• http://securityfocus.com/bid/37253 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4149 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=223999 · Vendor Advisory