IBM Netezza WebAdmin Multiple Security Vulnerabilities
BID:57839
Info
IBM Netezza WebAdmin Multiple Security Vulnerabilities
| Bugtraq ID: | 57839 |
| Class: | Unknown |
| CVE: |
CVE-2012-5760 CVE-2012-5761 CVE-2012-5762 CVE-2012-5763 CVE-2012-5940 CVE-2012-5941 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2013 12:00AM |
| Updated: | Feb 21 2013 06:22PM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM Netezza WebAdmin Multiple Security Vulnerabilities
IBM Netezza WebAdmin is prone to following security vulnerabilities:
1. An SQL-injection vulnerability
2. A cross-site scripting vulnerability
3. An information-disclosure vulnerability
4. A security-bypass vulnerability
5. A spoofing Vulnerability
6. An authentication-bypass vulnerability
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, bypass security restrictions to obtain sensitive information or perform unauthorized actions, gain administrative access, mislead a user to believe that they are viewing a legitimate site, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
IBM Netezza WebAdmin is prone to following security vulnerabilities:
1. An SQL-injection vulnerability
2. A cross-site scripting vulnerability
3. An information-disclosure vulnerability
4. A security-bypass vulnerability
5. A spoofing Vulnerability
6. An authentication-bypass vulnerability
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, bypass security restrictions to obtain sensitive information or perform unauthorized actions, gain administrative access, mislead a user to believe that they are viewing a legitimate site, or execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
Exploit / POC
IBM Netezza WebAdmin Multiple Security Vulnerabilities
Attackers can exploit these issues using a browser. To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting victim into following a URI.
Attackers can exploit these issues using a browser. To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting victim into following a URI.
Solution / Fix
IBM Netezza WebAdmin Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.