Airmagnet Enterprise Management Multiple Vulnerabilities
BID:20602
Info
Airmagnet Enterprise Management Multiple Vulnerabilities
| Bugtraq ID: | 20602 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2006 12:00AM |
| Updated: | Nov 22 2006 04:00PM |
| Credit: | ptsecurity is credited with discovery of these vulnerabilities. |
| Vulnerable: |
Airmagnet Enterprise Management 7.5 |
| Not Vulnerable: |
Airmagnet Enterprise Management 7.5 build 6307 |
Discussion
Airmagnet Enterprise Management Multiple Vulnerabilities
Airmagnet enterprise management is prone to multiple vulnerabilities, including multiple HTML-injection issues, a cross-site scripting vulnerability, and a man-in-the-middle attack.
An attacker can exploit these issues to retrieve sensitive information and to execute HTML and script code in the context of the affected site. The attacker may also be able to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
Versions prior to 7.5 build 6307 are vulnerable.
Airmagnet enterprise management is prone to multiple vulnerabilities, including multiple HTML-injection issues, a cross-site scripting vulnerability, and a man-in-the-middle attack.
An attacker can exploit these issues to retrieve sensitive information and to execute HTML and script code in the context of the affected site. The attacker may also be able to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
Versions prior to 7.5 build 6307 are vulnerable.
Exploit / POC
Airmagnet Enterprise Management Multiple Vulnerabilities
Attackers can exploit this issue via a web client.
Attackers can exploit this issue via a web client.
Solution / Fix
Airmagnet Enterprise Management Multiple Vulnerabilities
Solution:
The vendor has released a fix for these issues. Please see the references for information on how to obtain and apply these fixes.
Solution:
The vendor has released a fix for these issues. Please see the references for information on how to obtain and apply these fixes.
References
Airmagnet Enterprise Management Multiple Vulnerabilities
References:
References: