Cross site scripting

2019-10-0414:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.9%

JSON

IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CPENameOperatorVersion
security_key_lifecycle_managerge2.6.0
security_key_lifecycle_managerle2.6.0.5
security_key_lifecycle_managerge2.7.0
security_key_lifecycle_managerle2.7.0.4
security_key_lifecycle_managerge3.0
security_key_lifecycle_managerle3.0.0.2
security_key_lifecycle_managerge3.0.1
security_key_lifecycle_managerle3.0.1.1

Name	Operator	Version
security_key_lifecycle_manager	ge	2.6.0
security_key_lifecycle_manager	le	2.6.0.5
security_key_lifecycle_manager	ge	2.7.0
security_key_lifecycle_manager	le	2.7.0.4
security_key_lifecycle_manager	ge	3.0
security_key_lifecycle_manager	le	3.0.0.2
security_key_lifecycle_manager	ge	3.0.1
security_key_lifecycle_manager	le	3.0.1.1