PT-2012-5640 · Manageengine · Zoho Manageengine Firewall Analyzer
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
ManageEngine Firewall Analyzer version 7.2
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the
url parameter in the fw/index2.do endpoint. This is a different attack vector.Recommendations
For ManageEngine Firewall Analyzer version 7.2, consider restricting access to the
fw/index2.do endpoint until a fix is available, and avoid using the url parameter in this endpoint to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zoho Manageengine Firewall Analyzer