RETIRED: IBM InfoSphere BigInsights Multiple Security Vulnerabilities
BID:61604
Info
RETIRED: IBM InfoSphere BigInsights Multiple Security Vulnerabilities
| Bugtraq ID: | 61604 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 02 2013 12:00AM |
| Updated: | Aug 20 2013 09:07AM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: IBM InfoSphere BigInsights Multiple Security Vulnerabilities
IBM InfoSphere BigInsights is prone to a spoofing vulnerability, a cross-site scripting vulnerability, and a cross-site request-forgery vulnerability.
An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, and disclose or modify sensitive information, conduct spoofing attacks, and gain access to sensitive information. Other attacks may also be possible.
This BID is being retired. The following individual records exist to better document the issues:
61842 IBM InfoSphere BigInsights CVE-2013-3992 Cross Site Request Forgery Vulnerability
61845 IBM InfoSphere BigInsights CVE-2013-3995 Cross Site Scripting Vulnerability
61846 IBM InfoSphere BigInsights CVE-2013-3996 Unspecified Spoofing Vulnerability
IBM InfoSphere BigInsights is prone to a spoofing vulnerability, a cross-site scripting vulnerability, and a cross-site request-forgery vulnerability.
An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, and disclose or modify sensitive information, conduct spoofing attacks, and gain access to sensitive information. Other attacks may also be possible.
This BID is being retired. The following individual records exist to better document the issues:
61842 IBM InfoSphere BigInsights CVE-2013-3992 Cross Site Request Forgery Vulnerability
61845 IBM InfoSphere BigInsights CVE-2013-3995 Cross Site Scripting Vulnerability
61846 IBM InfoSphere BigInsights CVE-2013-3996 Unspecified Spoofing Vulnerability
Exploit / POC
IBM InfoSphere BigInsights Multiple Security Vulnerabilities
To exploit these issues an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
To exploit these issues an attacker must entice an unsuspecting victim into following a malicious URI or visiting a malicious website.
Solution / Fix
IBM InfoSphere BigInsights Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.