Cisco Prime Infrastructure Rogue AP SSID HTML Injection Vulnerability
BID:60263
Info
Cisco Prime Infrastructure Rogue AP SSID HTML Injection Vulnerability
| Bugtraq ID: | 60263 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-1247 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2013 12:00AM |
| Updated: | May 21 2013 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Prime Infrastructure 1.2 |
| Not Vulnerable: | |
Discussion
Cisco Prime Infrastructure Rogue AP SSID HTML Injection Vulnerability
Cisco Prime Infrastructure is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.
Cisco Prime Infrastructure 1.2.0 is affected.
Cisco Prime Infrastructure is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input.
Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.
Cisco Prime Infrastructure 1.2.0 is affected.
Solution / Fix
Cisco Prime Infrastructure Rogue AP SSID HTML Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: \"mailto:[email protected]\".
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: \"mailto:[email protected]\".