IBM Application Manager For Smart Business Multiple Unspecified Cross Site Scripting Vulnerabilities

Bugtraq ID:	60576
Class:	Input Validation Error
CVE:	CVE-2013-0548
Remote:	Yes
Local:	No
Published:	Jun 15 2013 12:00AM
Updated:	Nov 01 2013 08:13AM
Credit:	IBM
Vulnerable:	IBM Tivoli Monitoring 6.2.3 IBM Tivoli Monitoring 6.2.2 IBM Tivoli Monitoring 6.2.1 IBM Application Manager for Smart Business 1.2.1
Not Vulnerable:

IBM Application Manager For Smart Business Multiple Unspecified Cross Site Scripting Vulnerabilities

IBM Application Manager For Smart Business is prone to multiple unspecified cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

IBM Application Manager For Smart Business 1.2.1 is vulnerable.

IBM Application Manager For Smart Business Multiple Unspecified Cross Site Scripting Vulnerabilities

To exploit these issues an attacker must entice an unsuspecting victim into following a malicious URI.

IBM Application Manager For Smart Business Multiple Unspecified Cross Site Scripting Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Application Manager For Smart Business Multiple Unspecified Cross Site Scripting Vulnerabilities

References:

• IBM Homepage (IBM)