IBM Security Identity Manager CVE-2014-6096 Unspecified Cross Site Scripting Vulnerability
BID:71113
Info
IBM Security Identity Manager CVE-2014-6096 Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 71113 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-6096 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 13 2014 12:00AM |
| Updated: | Nov 13 2014 12:00AM |
| Credit: | IBM Security Systems Ethical Hacking Team: Paul Ionescu, Brennan Brazeau, John Zuccato, Jonathan Fitz-Gerald, and Warren Moynihan. |
| Vulnerable: |
IBM Security Identity Manager 6.0.0 |
| Not Vulnerable: | |
Discussion
IBM Security Identity Manager CVE-2014-6096 Unspecified Cross Site Scripting Vulnerability
IBM Security Identity Manager is prone to an unspecified cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
IBM Security Identity Manager is prone to an unspecified cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Solution / Fix
IBM Security Identity Manager CVE-2014-6096 Unspecified Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.