PT-2013-4821 · Ibm · Ibm Domino

Published 2013-11-08 · Updated 2017-08-29 · CVE-2013-4055

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0

Description A cross-site scripting (XSS) issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors.

Recommendations For IBM Domino versions 8.5 through 9.0, consider restricting access to the webadmin.nsf component until a fix is available. As a temporary workaround, limit the ability of remote authenticated users to inject web script or HTML in the Domino Web Administrator.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-4055

Affected Products

Ibm Domino

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21652988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4055 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86544 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4055 · Note