Vulnerability-Lookup

CERTA-2007-AVI-523

Vulnerability from certfr_avis - Published: 2007-12-05 - Updated: 2007-12-05

Une vulnérabilité de type « injection de code indirecte », ou cross-site scripting, a été identifiée dans le produit IBM Tivoli Netcool Security Manager.

Description

Une vulnérabilité de type « injection de code indirecte », ou cross-site scripting, a été identifiée dans le produit IBM Tivoli Netcool Security Manager.

Celle-ci peut être exploitée par une personne malveillante distante pour exécuter du code sur le navigateur d'un utilisateur connecté au service. Ce code aura les mêmes droits contextuels que ceux accordés au site d'IBM Tivoli Netcool Security Manager. Il est par exemple possible dans ces conditions de dérober les fichiers de session (cookies) et lancer des actions sur l'application via le poste de l'utilisateur.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Deux correctifs ont été successivement édités par IBM suite à cette vulnérabilité.

None

Impacted products

	Vendor	Product	Description
	IBM	Tivoli	IBM Tivoli Netcool Security Manager version 1.3

References

Title

Publication Time

Tags

Note d'information d'IBM 24017633 du 30 novembre 2007	None	vendor-advisory
Bulletin de sécurité IBM swg24017385 du 01 novembre 2007 :	-	other
Bulletin de sécurité IBM swg24017633 du 30 novembre 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Tivoli Netcool Security Manager version 1.3",
      "product": {
        "name": "Tivoli",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type \u00ab injection de code indirecte \u00bb, ou cross-site\nscripting, a \u00e9t\u00e9 identifi\u00e9e dans le produit IBM Tivoli Netcool Security\nManager.\n\nCelle-ci peut \u00eatre exploit\u00e9e par une personne malveillante distante pour\nex\u00e9cuter du code sur le navigateur d\u0027un utilisateur connect\u00e9 au service.\nCe code aura les m\u00eames droits contextuels que ceux accord\u00e9s au site\nd\u0027IBM Tivoli Netcool Security Manager. Il est par exemple possible dans\nces conditions de d\u00e9rober les fichiers de session (cookies) et lancer\ndes actions sur l\u0027application via le poste de l\u0027utilisateur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\nDeux correctifs ont \u00e9t\u00e9 successivement \u00e9dit\u00e9s par IBM suite \u00e0 cette\nvuln\u00e9rabilit\u00e9.\n",
  "cves": [
    {
      "name": "CVE-2007-6219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-6219"
    }
  ],
  "initial_release_date": "2007-12-05T00:00:00",
  "last_revision_date": "2007-12-05T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM swg24017385 du 01 novembre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24017385"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 IBM swg24017633 du 30 novembre 2007 :",
      "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24017633"
    }
  ],
  "reference": "CERTA-2007-AVI-523",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-12-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 de type \u00ab injection de code indirecte \u00bb, ou cross-site\nscripting, a \u00e9t\u00e9 identifi\u00e9e dans le produit IBM Tivoli Netcool Security\nManager.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans IBM Tivoli Netcool Security Manager",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note d\u0027information d\u0027IBM 24017633 du 30 novembre 2007",
      "url": null
    }
  ]
}

CVE-2007-6219 (GCVE-0-2007-6219)

Vulnerability from cvelistv5 – Published: 2007-12-04 17:00 – Updated: 2024-08-07 15:54

Summary

Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.vupen.com/english/advisories/2007/4059	vdb-entryx_refsource_VUPEN
	http://www-1.ibm.com/support/docview.wss?uid=swg1…	vendor-advisoryx_refsource_AIXAPAR
	http://www.securitytracker.com/id?1019026	vdb-entryx_refsource_SECTRACK
	http://secunia.com/advisories/27900	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/26673	vdb-entryx_refsource_BID
	http://www-1.ibm.com/support/docview.wss?uid=swg2…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:54:27.122Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2007-4059",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4059"
          },
          {
            "name": "IY95615",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY95615"
          },
          {
            "name": "1019026",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1019026"
          },
          {
            "name": "27900",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27900"
          },
          {
            "name": "26673",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26673"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24017385"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-02-26T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2007-4059",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4059"
        },
        {
          "name": "IY95615",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY95615"
        },
        {
          "name": "1019026",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1019026"
        },
        {
          "name": "27900",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27900"
        },
        {
          "name": "26673",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26673"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24017385"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-6219",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2007-4059",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4059"
            },
            {
              "name": "IY95615",
              "refsource": "AIXAPAR",
              "url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY95615"
            },
            {
              "name": "1019026",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1019026"
            },
            {
              "name": "27900",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27900"
            },
            {
              "name": "26673",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26673"
            },
            {
              "name": "http://www-1.ibm.com/support/docview.wss?uid=swg24017385",
              "refsource": "CONFIRM",
              "url": "http://www-1.ibm.com/support/docview.wss?uid=swg24017385"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-6219",
    "datePublished": "2007-12-04T17:00:00",
    "dateReserved": "2007-12-04T00:00:00",
    "dateUpdated": "2024-08-07T15:54:27.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2007-AVI-523

Description

Solution

CVE-2007-6219 (GCVE-0-2007-6219)

Tags

Sightings

Nomenclature