Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
BID:54075
Info
Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
| Bugtraq ID: | 54075 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-1038 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2012 12:00AM |
| Updated: | Jun 14 2012 12:00AM |
| Credit: | Craig Lambert from Dell SecureWorks |
| Vulnerable: |
Juniper Mobility System Software 7.7 Juniper Mobility System Software 7.6.2 |
| Not Vulnerable: |
Juniper Mobility System Software 7.7.1 Juniper Mobility System Software 7.6.3 |
Discussion
Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
Mobility System Software is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Mobility System Software versions prior to 7.6.3 and 7.7.1 are vulnerable.
Mobility System Software is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Mobility System Software versions prior to 7.6.3 and 7.7.1 are vulnerable.
Exploit / POC
Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
The following example URI is available:
https://www.example.com/aaa/wba_login.html?wbaredirect=wba-dnserror&9f45dâ?><script>alert(1)</script>22whatever=1
An attacker can exploit the issue by enticing an unsuspecting user to visit a specially crafted URL.
The following example URI is available:
https://www.example.com/aaa/wba_login.html?wbaredirect=wba-dnserror&9f45dâ?><script>alert(1)</script>22whatever=1
Solution / Fix
Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
Solution:
Reportedly, the vendor has fixed the issue, however, Symantec has not confirmed it. Please contact the vendor for more information.
Solution:
Reportedly, the vendor has fixed the issue, however, Symantec has not confirmed it. Please contact the vendor for more information.
References
Juniper Networks Mobility System Software 'aaa/wba_login.html' Cross Site Scripting Vulnerability
References:
References:
- Juniper Mobility System Software (MSS) web portal WebAAA cross-site scripting (X (Dell SecureWorks)
- Juniper Networks Homepage (Juniper Networks)