fkie_cve-2014-6100
Vulnerability from fkie_nvd
Published
2014-10-19 01:55
Modified
2024-11-21 02:13
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "76D71241-E8BE-4E48-8E25-DFCC919FF5E9", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "47D9A14A-E167-49AF-B675-B7C7933F64D5", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "1E22DDAC-4419-4214-BBB8-4984AA8F9090", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "AC77DA6D-55EC-4B98-9E75-57F9AD0642DA", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "0837005C-126A-4800-A3B1-74A22F0DC617", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "07D1C332-CFFA-4FA5-9BEF-673BE30E8378", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:security_directory_server:6.3.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "69DE7246-2030-4F00-A3B5-B9E911441449", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "06626F2E-605A-4AA0-839D-B035336453E1", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "2F468434-0317-435A-B2A6-5923A88A090F", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "E79197BC-3BDF-4F38-B63F-1B2A658B645F", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F7B1402A-B3C3-4210-928F-6EFCCE2DE1CF", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "92D48F0B-C9E2-4381-8463-83FF47136EB8", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "36308D0C-D92C-4857-A857-097F383EE76C", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "A84CEB80-796F-4928-A2A0-73E604543A70", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "462385FC-F345-42EE-ABF0-E1781CC648A9", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "F10F3910-5616-41A2-A3BF-18FA4DD68631", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "51C34738-5F9B-43A7-987F-EB805B31119E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "6AA93B63-9D15-4784-8585-DBC139A382E7", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "55D84E30-1F23-4A6A-B622-78DBEEBEFB46", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "50C9A7DF-6968-41CC-911A-B746CB43AA82", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "0EA493E1-F791-4FE5-9F7E-36CAC0D942C2", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "F7365156-4EA3-476A-A395-FADEDF1BA80A", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "321B15BC-2653-4B64-A5AE-9FCA6A08713C", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "5A1B527B-E07D-4543-92A6-0EE58CB8FECC", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "3CDBA9D2-E683-431A-B06C-5CCA55E44EA9", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "6EF4AFCB-755A-40E9-AB2B-4FDFD10B0388", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "86556AFA-F4F5-4C29-B59D-DC5281375E07", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "5E16D75E-7678-48AF-AA2D-33C167ACC99E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.21:*:*:*:*:*:*:*", "matchCriteriaId": "FBB97A26-E8A9-418C-87C9-F4837BF6680A", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "AFFA6A4C-8EE2-4898-9AEB-CA5EBE4BC5E9", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.23:*:*:*:*:*:*:*", "matchCriteriaId": "3922010D-4867-402C-9EC5-98FDEB281EA0", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "EBC6C026-A23F-4A12-BE0C-3333B9D5A0DE", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.25:*:*:*:*:*:*:*", "matchCriteriaId": "297D92F4-51B0-4DC0-B872-984AD0A6008F", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.26:*:*:*:*:*:*:*", "matchCriteriaId": "4B93E759-1B76-421D-9684-F6FF77A99E6C", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.27:*:*:*:*:*:*:*", "matchCriteriaId": "344605B3-15C9-4E36-A22B-7EBC1207A03E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.28:*:*:*:*:*:*:*", "matchCriteriaId": "F15D60CA-8B3C-48D7-A860-1B72BCA14CFA", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.29:*:*:*:*:*:*:*", "matchCriteriaId": "FD03B74B-E234-4757-8D98-896DEA4CED7F", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.30:*:*:*:*:*:*:*", "matchCriteriaId": "BAF9CDD0-3F78-4489-A18D-40A1FAF705F1", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.31:*:*:*:*:*:*:*", "matchCriteriaId": "3CBF6D03-9A58-477D-B5D0-030A373A58AA", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.32:*:*:*:*:*:*:*", "matchCriteriaId": "7C7636BE-22BB-44C3-B303-9780E2A24487", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.33:*:*:*:*:*:*:*", "matchCriteriaId": "7E4E6E83-914D-467F-9EEA-56669B95CCAD", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.34:*:*:*:*:*:*:*", "matchCriteriaId": "38BBCED9-4260-40DC-A9A6-40CDB09BA92E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.35:*:*:*:*:*:*:*", "matchCriteriaId": "D297D508-ACC2-41E7-B3F5-5AEDFE3E2453", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.36:*:*:*:*:*:*:*", "matchCriteriaId": "DBD3BA3E-E015-4CB7-B686-19F45F8221C1", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.37:*:*:*:*:*:*:*", "matchCriteriaId": "90F615EC-7530-468D-B62E-B07A1FE0431B", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.38:*:*:*:*:*:*:*", "matchCriteriaId": "7E278A8E-D7B6-450C-92D6-9955B22E18C5", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.39:*:*:*:*:*:*:*", "matchCriteriaId": "DB9D85F4-1019-419D-8769-B1636385384C", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.45:*:*:*:*:*:*:*", "matchCriteriaId": "A43ECBF2-8D39-469F-8D45-B2FA44B3A9FC", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.46:*:*:*:*:*:*:*", "matchCriteriaId": "18ABDC8A-118C-4A35-A396-1020A9469D82", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.47:*:*:*:*:*:*:*", "matchCriteriaId": "38204AD1-BF0E-4521-9EE6-66214B4A353B", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.48:*:*:*:*:*:*:*", "matchCriteriaId": "218DD29F-18C9-489D-9273-4705BFCDE0F6", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.63:*:*:*:*:*:*:*", "matchCriteriaId": "61B7FD9C-FEA9-4001-BD48-10B02B38989E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2:*:*:*:*:*:*:*", "matchCriteriaId": "B5682108-A76B-443A-A172-7F17F54B5983", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "7165C049-258B-425D-B36B-152BBF3F8727", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "653551D3-88A3-4E69-A1B1-64326BEF1F18", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2CBAF2E5-4931-41AF-BCDA-D769B06FB05E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "98186E56-0F75-4306-9E34-A388EA2FD6C4", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "2FC2A00D-4A9E-4BB7-81E6-A0D3A8434EA3", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D0CB6BE6-C851-4C31-A016-CCD4937277D9", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "2260260B-B69E-4B59-A0D1-1F71B92ABDFA", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "F8BFF1C8-8AEA-43FC-B76C-F4A44A713F9E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "E08631DE-72C4-462B-9763-41783EA8963C", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "50315494-8C1B-436B-8E24-8B8CA565FB17", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "2759F8BC-8400-4AB1-81DD-51BD69BB720E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "EEEB330D-5FC6-424B-85EF-06A56329FFEC", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "3588C1D0-3C8F-4C7A-A7F7-94EE51FA7ECF", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "33DE5E95-BA4A-42A2-B376-373331D9934E", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "6D5D35E5-AFBE-4D90-9E89-9251C45CF0DB", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "B87492D7-D0C6-4E4A-87B3-F44BC3149101", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.19:*:*:*:*:*:*:*", "matchCriteriaId": "262F93A7-54A6-4D06-B5D1-FF6F7740044B", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "E4798A6D-E4F3-4481-B2C2-DCA4BCD97572", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.21:*:*:*:*:*:*:*", "matchCriteriaId": "FE5E8D59-79F9-46D1-A1A7-608FA49F7121", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "BB8B3BE0-2515-4CB1-B124-5462703CD32B", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.38:*:*:*:*:*:*:*", "matchCriteriaId": "3DD471E9-2DD0-4364-ABC2-9CFC0747A477", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "C5C3DDD9-9013-414E-B5EB-65F576E12778", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "1D48029C-3455-46A6-A8CA-8013A167979B", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "D872267B-B01D-4723-A522-8CDF684CB980", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "2234E088-31ED-4BBF-94C5-131E3B0CB994", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "0CCF803A-86AE-4875-ABD8-2DDB44D88F56", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "DB3E505A-C749-4465-964F-0699DB9C094A", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "F3B64779-4C28-4538-8F3C-EE32152AA8AD", "vulnerable": true }, { "criteria": "cpe:2.3:a:ibm:tivoli_directory_server:6.3.0.32:*:*:*:*:*:*:*", "matchCriteriaId": "CEFC8686-795C-455B-B411-BD56E91683CD", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Admin UI in IBM Tivoli Directory Server 6.1 before 6.1.0.64-ISS-ITDS-IF0064, 6.2 before 6.2.0.39-ISS-ITDS-FP0039, and 6.3 before 6.3.0.33-ISS-ITDS-IF0033, and IBM Security Directory Server 6.3.1 before 6.3.1.7-ISS-ISDS-IF0007, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL." }, { "lang": "es", "value": "Vulnerabilidad de XSS en la interfaz del usuario de administraci\u00f3n en IBM Tivoli Directory Server 6.1 anterior a 6.1.0.64-ISS-ITDS-IF0064, 6.2 anterior a 6.2.0.39-ISS-ITDS-FP0039, y 6.3 anterior a 6.3.0.33-ISS-ITDS-IF0033, e IBM Security Directory Server 6.3.1 anterior a 6.3.1.7-ISS-ISDS-IF0007, permite a usuarios remotos autenticados inyectar secuencias de comandos web a trav\u00e9s de una URL manipulada." } ], "id": "CVE-2014-6100", "lastModified": "2024-11-21T02:13:46.730", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "LOW", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true } ] }, "published": "2014-10-19T01:55:15.717", "references": [ { "source": "psirt@us.ibm.com", "url": "http://secunia.com/advisories/61061" }, { "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686581" }, { "source": "psirt@us.ibm.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96005" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/61061" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686581" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96005" } ], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-79" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.