IBM WebSphere Portal CVE-2018-1361 Cross Site Scripting Vulnerability

Bugtraq ID:	102501
Class:	Input Validation Error
CVE:	CVE-2018-1361
Remote:	Yes
Local:	No
Published:	Jan 09 2018 12:00AM
Updated:	Jan 09 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM Websphere Portal 9.0.0.0 CF15 IBM Websphere Portal 9.0.0.0 CF14 IBM Websphere Portal 9.0.0.0 IBM Websphere Portal 8.5.0.0 CF15 IBM Websphere Portal 8.5.0.0 CF14 IBM Websphere Portal 8.5.0.0 CF11 IBM Websphere Portal 8.5.0.0 CF09 IBM Websphere Portal 8.5.0.0 CF08 IBM Websphere Portal 8.5.0.0 CF06 IBM Websphere Portal 8.5.0.0
Not Vulnerable:

IBM WebSphere Portal CVE-2018-1361 Cross Site Scripting Vulnerability

IBM WebSphere Portal is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

IBM WebSphere Portal CVE-2018-1361 Cross Site Scripting Vulnerability

An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.

IBM WebSphere Portal CVE-2018-1361 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere Portal CVE-2018-1361 Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Cross-Site Scripting Vulnerability in IBM WebSphere Portal (C (IBM)