CVE-2014-5348

MEDIUM · 4.3 CVSS Gepubliceerd: 19-08-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in apps/zxtm/locallog.cgi in Riverbed Stingray (ook bekend als SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 stelt aanvallers op afstand in staat om willekeurig webscript of HTML te injecteren via de logbestandparameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile parameter.

Vendors

Riverbed

Affected products

Steelapp Traffic Manager

References

seclists.org
www.securityfocus.com