CERTA-2011-AVI-300
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité de type injection de code indirecte à distance (XSS) a été identifiée dans HP Business Availibility Center.
Description
Une vulnérabilité a été corrigée dans HP Business Availibility Center. Certaines entrées n'étant pas correctement controlées, une personne malveillante distante peut réaliser de l'injection de code indirecte.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
HB Business Availibility Center (BAC) versions 8.06 et antérieures sur plates-formes Windows et Solaris.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eHB Business Availibility Center (BAC) versions 8.06 et ant\u00e9rieures sur plates-formes Windows et Solaris.\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans HP Business Availibility Center.\nCertaines entr\u00e9es n\u0027\u00e9tant pas correctement control\u00e9es, une personne\nmalveillante distante peut r\u00e9aliser de l\u0027injection de code indirecte.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1856"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 HP c02823184 du 12 mai 2011 :",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02823184"
}
],
"reference": "CERTA-2011-AVI-300",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-05-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 de type injection de code indirecte \u00e0 distance (\u003cspan\nclass=\"textit\"\u003eXSS\u003c/span\u003e) a \u00e9t\u00e9 identifi\u00e9e dans HP Business\nAvailibility Center.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans HP Business Availibility Center",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 HPSBMA02681 du 12 mai 2011",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…