EMC Adaptive Authentication Flash Shockwave File Cross Domain Scripting Vulnerability

Bugtraq ID:	47408
Class:	Input Validation Error
CVE:	CVE-2011-1422
Remote:	Yes
Local:	No
Published:	Apr 18 2011 12:00AM
Updated:	Apr 18 2011 12:00AM
Credit:	EMC
Vulnerable:	EMC Adaptive Authentication 5.7 EMC Adaptive Authentication 6.0 EMC Adaptive Authentication 2.0
Not Vulnerable:

EMC Adaptive Authentication Flash Shockwave File Cross Domain Scripting Vulnerability

EMC Adaptive Authentication is prone to a cross-domain scripting vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of a different domain. This may aid in other attacks.

EMC Adaptive Authentication Flash Shockwave File Cross Domain Scripting Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC Adaptive Authentication Flash Shockwave File Cross Domain Scripting Vulnerability

Solution:
Updates are available. Please see the references for more information.

EMC Adaptive Authentication Flash Shockwave File Cross Domain Scripting Vulnerability

References:

• Vendor Homepage (EMC )
  
• ESA-2011-014: RSA, The Security Division of EMC, announces the ([email protected])