IBM Information Server Metadata Workbench Cross-Site Scripting Vulnerability

Release date:
Updated on: 2013-02-04

Affected Systems:
IBM InfoSphere Information Server 8.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57635
CVE (CAN) ID: CVE-2012-0203
 
IBM InfoSphere Information Server can help enterprises obtain value from the complex Information distributed within their systems.
 
The IBM Information Server Metadata Workbench 8.1, 8.5, and 8.7 have a cross-site scripting vulnerability, which can lead to unauthorized access.
 
<* Source: vendor

Link: http://secunia.com/advisories/51985/
Https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_multiple_security_vulnerabil
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
IBM
---
For this reason, IBM has released a Security Bulletin (swg21623501) and corresponding patches:
Swg21623501: Multiple security vulnerabilities in the IBM InfoSphere Information Server Suite
Link: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_multiple_security_vulnerabil