PT-2011-4537
CVE-2011-3576
·
تاريخ النشر
2011-09-17
·
تاريخ التحديث
2011-09-23
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Lotus Domino version 8.5.2
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the
PanelIcon parameter in an "fmpgPanelHeader ReadForm" action to "WebAdmin.nsf".Recommendations
For IBM Lotus Domino version 8.5.2, consider restricting access to the
PanelIcon parameter in the "fmpgPanelHeader ReadForm" action to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾