PT-2012-5638 · Zoho · Zoho Manageengine Firewall Analyzer

Published

2012-09-10

·

Updated

2017-08-29

·

CVE-2012-4889

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions ManageEngine Firewall Analyzer version 7.2
Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved by manipulating specific parameters in various API endpoints, including createAnomaly.do, mindex.do, index2.do, and syslogViewer.do. The vulnerable parameters are:
  • subTab and tab in createAnomaly.do,
  • url, subTab, and tab in mindex.do,
  • tab in index2.do,
  • port in syslogViewer.do.
Recommendations For ManageEngine Firewall Analyzer version 7.2, update to a version that includes a fix for this issue, as using outdated software can pose significant security risks. As a temporary workaround, consider restricting access to the affected API endpoints, such as createAnomaly.do, mindex.do, index2.do, and syslogViewer.do, to minimize the risk of exploitation. Avoid using the vulnerable parameters subTab, tab, url, and port in the respective API endpoints until the issue is resolved.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-4889

Affected Products

Zoho Manageengine Firewall Analyzer