IBM Records Manager Multiple Unspecified Remote Vulnerabilities
BID:43136
Info
IBM Records Manager Multiple Unspecified Remote Vulnerabilities
| Bugtraq ID: | 43136 |
| Class: | Unknown |
| CVE: |
CVE-2010-3317 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2010 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | BY REGIONS |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM Records Manager Multiple Unspecified Remote Vulnerabilities
IBM Records Manager is prone to the following issues:
1. A remote URI-redirection vulnerability.
2. A cross-site scripting vulnerability.
3. An information-disclosure vulnerability.
Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, and obtain sensitive information; other attacks may also be possible.
IBM Records Manager 4.5.1 is vulnerable; other versions may also be affected.
IBM Records Manager is prone to the following issues:
1. A remote URI-redirection vulnerability.
2. A cross-site scripting vulnerability.
3. An information-disclosure vulnerability.
Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, conduct phishing attacks, and obtain sensitive information; other attacks may also be possible.
IBM Records Manager 4.5.1 is vulnerable; other versions may also be affected.
Exploit / POC
IBM Records Manager Multiple Unspecified Remote Vulnerabilities
An attacker can exploit these issues using readily available tools. To exploit cross-site scripting and URI redirection issues, the attacker must entice an unsuspecting victim to follow a malicious URI.
An attacker can exploit these issues using readily available tools. To exploit cross-site scripting and URI redirection issues, the attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
IBM Records Manager Multiple Unspecified Remote Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
IBM Records Manager Multiple Unspecified Remote Vulnerabilities
References:
References:
- Product Page (IBM)
- PJ37426 (IBM)