IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
BID:63178
Info
IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
| Bugtraq ID: | 63178 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2013-5376 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2013 12:00AM |
| Updated: | Oct 23 2013 12:36AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Scale Out Network Attached Storage 1.3.0.5 IBM Scale Out Network Attached Storage 1.3.0.4 |
| Not Vulnerable: | |
Discussion
IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
IBM Storwize V7000 Unified is prone to a cross-frame scripting vulnerability.
Successful exploits will allow attackers to bypass the same-origin policy and gain unauthorized access to the affected system with administrative privileges.
IBM Storwize V7000 Unified 1.3.0.0 through 1.4.1.1 are vulnerable.
IBM Storwize V7000 Unified is prone to a cross-frame scripting vulnerability.
Successful exploits will allow attackers to bypass the same-origin policy and gain unauthorized access to the affected system with administrative privileges.
IBM Storwize V7000 Unified 1.3.0.0 through 1.4.1.1 are vulnerable.
Exploit / POC
IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
Attackers can exploit this issue by tricking an unsuspecting victim into visiting a malicious web page.
Attackers can exploit this issue by tricking an unsuspecting victim into visiting a malicious web page.
Solution / Fix
IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Storwize V7000 Unified CVE-2013-5376 Cross Frame Scripting Vulnerability
References:
References: