Hitachi IT Operations Director cross-site scripting and DoS Vulnerabilities

Release date:
Updated on:

Affected Systems:
Hitachi IT Operations Director
Description:
--------------------------------------------------------------------------------
Hitachi IT Operations Director is a system management software that automates client IT infrastructure lifecycle tasks.

Hitachi IT Operations Director 02-50-01 to 02-50-07 and 03-03-03-00-07 have Implementation Vulnerabilities, which can be exploited by malicious users to execute cross-site scripting and DoS attacks.

1) Some inputs are not properly filtered before being returned to the user, and HTML and script code can be executed in the user's browser session.

2) unknown details may cause a crash.

<* Source: vendor

Link: http://secunia.com/advisories/49144/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Hitachi
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.hitachi.co.jp