IBM Security Network Protection CVE-2014-6189 Unspecified Cross Site Scripting Vulnerability

Bugtraq ID:	73940
Class:	Input Validation Error
CVE:	CVE-2014-6189
Remote:	Yes
Local:	No
Published:	Apr 01 2015 12:00AM
Updated:	Apr 01 2015 12:00AM
Credit:	Paul Ionescu, Brennan Brazeau, John Zuccato, Jonathan Fitz-Gerald and Warren Moynihan
Vulnerable:	IBM Security Network Protection 7100 5.3 IBM Security Network Protection 7100 5.2 IBM Security Network Protection 5100 5.3 IBM Security Network Protection 5100 5.2 IBM Security Network Protection 4100 5.3 IBM Security Network Protection 4100 5.2 IBM Security Network Protection 3100 5.3 IBM Security Network Protection 3100 5.2
Not Vulnerable:

IBM Security Network Protection CVE-2014-6189 Unspecified Cross Site Scripting Vulnerability

IBM Security Network Protection is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

IBM Security Network Protection CVE-2014-6189 Unspecified Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security Network Protection CVE-2014-6189 Unspecified Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Vulnerability in Rational Quality Manager with potential for (IBM)