IBM 1754 GCM16 and GCM32 Global Console Managers Cross Site Scripting Vulnerability
BID:68777
Info
IBM 1754 GCM16 and GCM32 Global Console Managers Cross Site Scripting Vulnerability
| Bugtraq ID: | 68777 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3080 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 14 2014 12:00AM |
| Updated: | Jul 14 2014 12:00AM |
| Credit: | Alejandro Alvarez Bravo |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM 1754 GCM16 and GCM32 Global Console Managers Cross Site Scripting Vulnerability
IBM 1754 GCM16 and GCM32 Global Console Managers are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The following versions are vulnerable:
IBM 1754 GCM16 Global Console Manager running firmware 1.20.0.22575 and prior
IBM 1754 GCM32 Global Console Manager running firmware 1.20.0.22575 and prior
IBM 1754 GCM16 and GCM32 Global Console Managers are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The following versions are vulnerable:
IBM 1754 GCM16 Global Console Manager running firmware 1.20.0.22575 and prior
IBM 1754 GCM32 Global Console Manager running firmware 1.20.0.22575 and prior
Exploit / POC
IBM 1754 GCM16 and GCM32 Global Console Managers Multiple Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URIs are available:
http://www.example.com/kvm.cgi?%3Cscript%3Ealert%28%22aaa%22%29%3C/script%3E
https://www.example.com/avctalert.php?arg1=dadadasdasd&arg2=dasdasdas&key=[xss]
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
The following example URIs are available:
http://www.example.com/kvm.cgi?%3Cscript%3Ealert%28%22aaa%22%29%3C/script%3E
https://www.example.com/avctalert.php?arg1=dadadasdasd&arg2=dasdasdas&key=[xss]
Solution / Fix
IBM 1754 GCM16 and GCM32 Global Console Managers Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM 1754 GCM16 and GCM32 Global Console Managers Cross Site Scripting Vulnerability
References:
References: