Opsview Multiple Security Vulnerabilities
BID:64508
Info
Opsview Multiple Security Vulnerabilities
| Bugtraq ID: | 64508 |
| Class: | Unknown |
| CVE: |
CVE-2013-7254 CVE-2013-7255 CVE-2013-7256 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2013 12:00AM |
| Updated: | Jan 09 2014 03:50AM |
| Credit: | Darren Glynn |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Opsview Multiple Security Vulnerabilities
IBM Maximo Asset Management is prone to multiple security vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An open URI-redirection vulnerability
3. A cross-site request-forgery vulnerability
Attackers can leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected site, steal cookie-based authentication credentials, perform unauthorized actions or redirect a user to a potentially malicious site. Other attacks are also possible.
Versions prior to Opsview 4.2.2 are vulnerable.
IBM Maximo Asset Management is prone to multiple security vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An open URI-redirection vulnerability
3. A cross-site request-forgery vulnerability
Attackers can leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected site, steal cookie-based authentication credentials, perform unauthorized actions or redirect a user to a potentially malicious site. Other attacks are also possible.
Versions prior to Opsview 4.2.2 are vulnerable.
Exploit / POC
Opsview Multiple Security Vulnerabilities
Attackers can exploit these issues using a browser. To exploit a cross-site scripting and cross-site request-forgery issues, an attacker must entice an unsuspecting victim into following a URI.
Attackers can exploit these issues using a browser. To exploit a cross-site scripting and cross-site request-forgery issues, an attacker must entice an unsuspecting victim into following a URI.
Solution / Fix
Opsview Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Opsview Multiple Security Vulnerabilities
References:
References: