Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability

Bugtraq ID:	26708
Class:	Input Validation Error
CVE:	CVE-2007-5582
Remote:	Yes
Local:	No
Published:	Dec 05 2007 12:00AM
Updated:	Dec 06 2007 12:22AM
Credit:	Dave Lewis is credited with the discovery of this vulnerability.
Vulnerable:	Cisco CiscoWorks Common Services 3.1 Cisco CiscoWorks Common Services 3.0 Cisco CiscoWorks 2.6
Not Vulnerable:

Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability

CiscoWorks is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

CiscoWorks 2.6 is vulnerable; other versions may also be affected.

Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability

Solution:
Reports indicate that the vendor released a patch to address this issue. Please contact the vendor for information on how to obtain and apply the patch.

Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Advisory: Cross Site Scripting in CiscoWorks ("Liquidmatrix Security Digest" )
  
• Cisco Security Response: CiscoWorks Server XSS Vulnerability (Cisco)