Arkoon SSL360 Unspecified Cross-Site Scripting Vulnerability
BID:20890
Info
Arkoon SSL360 Unspecified Cross-Site Scripting Vulnerability
| Bugtraq ID: | 20890 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 03 2006 12:00AM |
| Updated: | Nov 06 2006 09:12PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Arkoon SSL360 2.0/2 |
| Not Vulnerable: |
Arkoon SSL360 2.0/3 |
Discussion
Arkoon SSL360 Unspecified Cross-Site Scripting Vulnerability
Arkoon SSL360 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Arkoon 2.0/2 and prior versions are vulnerable to this issue.
Arkoon SSL360 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Arkoon 2.0/2 and prior versions are vulnerable to this issue.
Exploit / POC
Arkoon SSL360 Unspecified Cross-Site Scripting Vulnerability
An attacker can exploit this issue by tricking a victim user into following a malicious URI.
An attacker can exploit this issue by tricking a victim user into following a malicious URI.
Solution / Fix
Arkoon SSL360 Unspecified Cross-Site Scripting Vulnerability
Solution:
The vendor has released an update to address this issue. Please contact the vendor for more information on how to obtain and apply this fix.
Solution:
The vendor has released an update to address this issue. Please contact the vendor for more information on how to obtain and apply this fix.