IBM Lotus Connections 'simpleSearch.do' Cross Site Scripting Vulnerability

Bugtraq ID:	36513
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 23 2009 12:00AM
Updated:	Sep 24 2009 03:30PM
Credit:	IBM
Vulnerable:	IBM Lotus Connections 2.0.1
Not Vulnerable:

IBM Lotus Connections 'simpleSearch.do' Cross Site Scripting Vulnerability

IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks

IBM Lotus Connections 2.0.1 is affected; other versions may be vulnerable as well.

IBM Lotus Connections 'simpleSearch.do' Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.

The following example URI is available:

https://www.example.com/profiles/html/simpleSearch.do?name=<IMG%20SRC="vbscript:msgbox(document.cookie)'>&lang=en

IBM Lotus Connections 'simpleSearch.do' Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references for details.


IBM Lotus Connections 2.0.1

• IBM Interim Fix for LO34540
  http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorder?apar =LO34540&vrmf=2.0.1.0&productid=Lotus%20Connections&brandid=2

IBM Lotus Connections 'simpleSearch.do' Cross Site Scripting Vulnerability

References:

• Lotus Connections - Social software for business (IBM)
  
• swg24024414 LO44244 Profiles: Application is vulnerable to reflective Cross-site (IBM)