IBM TRIRIGA Application Platform CVE-2017-1372 Unspecified Cross Site Scripting Vulnerability
BID:99906
Info
IBM TRIRIGA Application Platform CVE-2017-1372 Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 99906 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1372 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 17 2017 12:00AM |
| Updated: | Jul 17 2017 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM TRIRIGA Application Platform 3.5.2 IBM TRIRIGA Application Platform 3.5.1 IBM TRIRIGA Application Platform 3.5 IBM TRIRIGA Application Platform 3.4.2 IBM TRIRIGA Application Platform 3.4.1 IBM TRIRIGA Application Platform 3.4 IBM TRIRIGA Application Platform 3.3.2 IBM TRIRIGA Application Platform 3.3.1 IBM TRIRIGA Application Platform 3.3 IBM TRIRIGA Application Platform 3.5.2.2 IBM TRIRIGA Application Platform 3.5.2.1 IBM TRIRIGA Application Platform 3.5.2.0 IBM TRIRIGA Application Platform 3.5.1.2 IBM TRIRIGA Application Platform 3.5.1.1 IBM TRIRIGA Application Platform 3.5.1.0 IBM TRIRIGA Application Platform 3.5.0.2 IBM TRIRIGA Application Platform 3.5.0.1 IBM TRIRIGA Application Platform 3.4.2.5 IBM TRIRIGA Application Platform 3.4.2.4 IBM TRIRIGA Application Platform 3.4.2.3 IBM TRIRIGA Application Platform 3.4.2.2 IBM TRIRIGA Application Platform 3.4.2.1 IBM TRIRIGA Application Platform 3.4.0.1 IBM TRIRIGA Application Platform 3.3.2.5 IBM TRIRIGA Application Platform 3.3.2.2 IBM TRIRIGA Application Platform 3.3.2.1 IBM TRIRIGA Application Platform 3.3.2.0 IBM TRIRIGA Application Platform 3.3.1.3 IBM TRIRIGA Application Platform 3.3.1.2 IBM TRIRIGA Application Platform 3.3.1.1 IBM TRIRIGA Application Platform 3.3.1.0 IBM TRIRIGA Application Platform 3.3.0.2 IBM TRIRIGA Application Platform 3.3.0.1 IBM TRIRIGA Application Platform 3.3.0.0 |
| Not Vulnerable: |
IBM TRIRIGA Application Platform 3.5.2.3 IBM TRIRIGA Application Platform 3.4.2.6 IBM TRIRIGA Application Platform 3.3.2.6 |
Exploit / POC
IBM TRIRIGA Application Platform CVE-2017-1372 Unspecified Cross Site Scripting Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
Solution / Fix
IBM TRIRIGA Application Platform CVE-2017-1372 Unspecified Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM TRIRIGA Application Platform CVE-2017-1372 Unspecified Cross Site Scripting Vulnerability
References:
References: