PT-2014-7045
CVE-2014-6100
·
تاريخ النشر
2014-10-19
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Directory Server versions 6.1 before 6.1.0.64-ISS-ITDS-IF0064
IBM Tivoli Directory Server versions 6.2 before 6.2.0.39-ISS-ITDS-FP0039
IBM Tivoli Directory Server versions 6.3 before 6.3.0.33-ISS-ITDS-IF0033
IBM Security Directory Server versions 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007
Description
A cross-site scripting (XSS) issue exists in the Admin UI, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Recommendations
For IBM Tivoli Directory Server version 6.1, update to 6.1.0.64-ISS-ITDS-IF0064 or later.
For IBM Tivoli Directory Server version 6.2, update to 6.2.0.39-ISS-ITDS-FP0039 or later.
For IBM Tivoli Directory Server version 6.3, update to 6.3.0.33-ISS-ITDS-IF0033 or later.
For IBM Security Directory Server version 6.3.1, update to 6.3.1.7-ISS-ISDS-IF0007 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾