RETIRED: IBM Unica NightInsight 'lo' Cross Site Scripting Vulnerability

Bugtraq ID:	48314
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 16 2011 12:00AM
Updated:	Jun 23 2011 10:10PM
Credit:	Hernan Hegykozi and Ivan Sanche
Vulnerable:	IBM Unica NetInsight 0
Not Vulnerable:

RETIRED: IBM Unica NightInsight 'lo' Cross Site Scripting Vulnerability

IBM Unica NightInsight is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

RETIRED: This BID is being retired; the issue is specific to the IBM site and does not affect a specific product of IBM.

IBM Unica NightInsight 'lo' Cross Site Scripting Vulnerability

To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting user to follow a malicious URI.

IBM Unica NightInsight 'lo' Cross Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Unica NightInsight 'lo' Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Unica NetInsight + IBM Websites �?? Remote Phishing Attack End Users (IBM)