HP Operations for UNIX cross-site scripting and security bypass vulnerabilities and Solutions

Source: Internet
Author: User

 
Vulnerability Release Date:
Vulnerability Update Time:
 
Vulnerability cause
Design Error
Hazard level
Low
 
Impact System
XML Security Library 1.x
 
Unaffected System
 
Hazards
Remote attackers can exploit this vulnerability to obtain sensitive information or bypass authentication to access restricted resources.
 
Attack Conditions
Attackers must access HP Operations.
 
Vulnerability Information
HP Operations is a Distributed Client/Server software product used to manage distributed environments.
HP Operations on Unix platforms has a security vulnerability that allows malicious users to perform cross-site scripting attacks and bypass some security features.
-Some inputs lack filtering before returning users. Attackers can exploit this vulnerability to perform cross-site scripting attacks to obtain sensitive information or hijack target user sessions.
-There is an unknown error that allows attackers to gain unauthorized access to certain resources. Currently, no detailed vulnerability details are provided.
 
Test Method
 
Vendor solutions
You can obtain the patch information by referring to the Security announcements provided by the following vendors:
Http://www11.itrc.hp.com/service/cki/docDisplay.do? DocId = emr_na-c02770049
 
Vulnerability provider
HP

 
Vulnerability message Link
Http://secunia.com/advisories/43985/
 
Vulnerability Message Title
HP Operations for UNIX Cross-Site Scripting and Security Bypass
 
 

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.