Test Kennung:	1.3.6.1.4.1.25623.1.0.809794
Kategorie:	VMware Local Security Checks
Titel:	VMware vRealize Automation Cross-Site Scripting Vulnerability (VMSA-2016-0003)
Zusammenfassung:	VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability.
Beschreibung:	Summary: VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists as software does not properly filter HTML code from user-supplied input before displaying the input. Vulnerability Impact: Successful exploitation will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application, potentially allowing the attacker to steal cookie-based authentication credentials or control how the page is rendered to the user. Affected Software/OS: VMware vRealize Automation versions 6.x prior to 6.2.4 on Linux. Solution: Upgrade to VMware vRealize Automation version 6.2.4 Build 3624994 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Querverweis:	BugTraq ID: 84420 Common Vulnerability Exposure (CVE) ID: CVE-2015-2344 http://www.securitytracker.com/id/1035270
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.