Novell Identity Manager Unspecified Cross Site Scripting Vulnerability

Bugtraq ID:	45692
Class:	Input Validation Error
CVE:	CVE-2010-4324
Remote:	Yes
Local:	No
Published:	Jan 06 2011 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Novell
Vulnerable:	Novell Identity Manager Roles Based Provisioning Module 3.7 Novell Identity Manager Roles Based Provisioning Module 3.6.1 Novell Identity Manager Roles Based Provisioning Module 3.6 Novell Identity Manager 3.6.1 Novell Identity Manager 3.5.1 Novell Identity Manager 3.0.1 SP1 Novell Identity Manager 3.0.1 Novell Identity Manager 3.5.1 20070730 Novell Identity Manager 3.5 Novell Identity Manager 3.0
Not Vulnerable:

Novell Identity Manager Unspecified Cross Site Scripting Vulnerability

Novell Identity Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Identity Manager Roles Based Provisioning Module 3.7.0 (User Application 3.7.0) prior to Field Patch 370D is affected.

Novell Identity Manager Unspecified Cross Site Scripting Vulnerability

To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI.

Novell Identity Manager Unspecified Cross Site Scripting Vulnerability

References:

• Novell Identity Manager (Novell)
  
• IDM Roles Based Provisioning Module 370 Field Patch D (Novell)