Hitachi JP1/Automatic Operation Unspecified Cross-Site Scripting Vulnerability

Bugtraq ID:	59978
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 17 2013 12:00AM
Updated:	May 17 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Hitachi JP1/Automatic Operation Unspecified Cross-Site Scripting Vulnerability

Hitachi JP1/Automatic Operation is prone to an unspecified cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Hitachi JP1/Automatic Operation 10-00 through 10-00-02 and 10-01 are vulnerable.

Hitachi JP1/Automatic Operation Unspecified Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Hitachi JP1/Automatic Operation Unspecified Cross-Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Hitachi JP1/Automatic Operation Unspecified Cross-Site Scripting Vulnerability

References:

• Hitachi Homepage (Hitachi)