CERTA-2011-AVI-300
Vulnerability from certfr_avis
Une vulnérabilité de type injection de code indirecte à distance (XSS) a été identifiée dans HP Business Availibility Center.
Description
Une vulnérabilité a été corrigée dans HP Business Availibility Center. Certaines entrées n'étant pas correctement controlées, une personne malveillante distante peut réaliser de l'injection de code indirecte.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
HB Business Availibility Center (BAC) versions 8.06 et antérieures sur plates-formes Windows et Solaris.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eHB Business Availibility Center (BAC) versions 8.06 et ant\u00e9rieures sur plates-formes Windows et Solaris.\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans HP Business Availibility Center.\nCertaines entr\u00e9es n\u0027\u00e9tant pas correctement control\u00e9es, une personne\nmalveillante distante peut r\u00e9aliser de l\u0027injection de code indirecte.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2011-1856",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-1856"
}
],
"initial_release_date": "2011-05-18T00:00:00",
"last_revision_date": "2011-05-18T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 HP c02823184 du 12 mai 2011 :",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02823184"
}
],
"reference": "CERTA-2011-AVI-300",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2011-05-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 de type injection de code indirecte \u00e0 distance (\u003cspan\nclass=\"textit\"\u003eXSS\u003c/span\u003e) a \u00e9t\u00e9 identifi\u00e9e dans HP Business\nAvailibility Center.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans HP Business Availibility Center",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 HPSBMA02681 du 12 mai 2011",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…