PT-2017-17679
CVE-2017-7352
·
تاريخ النشر
2017-10-11
·
تاريخ التحديث
2019-12-11
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Pure Storage Purity version 4.7.5
Description
A stored Cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via the
host parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen.Recommendations
For Pure Storage Purity version 4.7.5, avoid using the
host parameter in the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen until a fix is available. Consider restricting access to the SNMP Trap Manager configuration to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾