Information disclosure

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129...

Cross site scripting

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052...

CVE-2020-4146

CVE-2020-4146 affects IBM Security SiteProtector System 3.1.1. The root cause is missing the HttpOnly flag, enabling a remote attacker to obtain sensitive information from the Web interface. Documentsconfirm the affected product/version and describe the impact as information disclosure. Public-fa...

CVE-2020-4146

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129...

CVE-2020-4140

Summary (CVE-2020-4140): IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting in the Web UI, enabling embedding of arbitrary JavaScript that can alter UI behavior and potentially disclose credentials within a trusted session. The issue affects SiteProtector System version...

CVE-2020-4140

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052...

PT-2021-12115

Name of the Vulnerable Software and Affected Versions: IBM Security SiteProtector System version 3.1.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2020-4146: Incorrect Permission Assignment for Critical Resource

IBM Security SiteProtector System 3.1.1 could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 174129...

PT-2021-12116

Name of the Vulnerable Software and Affected Versions: IBM Security SiteProtector System version 3.1.1 Description: The issue is caused by a missing 'HttpOnly' flag, allowing a remote attacker to obtain sensitive information. A remote attacker could exploit this to obtain sensitive information...

IBM SiteProtector Appliance Information Disclosure Vulnerability

The IBM Security SiteProtector System is a centralized management system from IBM USA, Inc. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or devices.A security vulnerability exists in the IBM SiteProtector Appliance that...

CVE-2020-4140: Improper Neutralization of Input During Web Page Generation

IBM Security SiteProtector System 3.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174052...

Security Bulletin: IBM Security SiteProtector System is affected by vulnerability CVE-2020-4146

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Core XPU Vulnerability Details CVEID: CVE-2020-4146 DESCRIPTION: IBM SiteProtector Appliance could allow a remote attacker to obtain sensitive information, caused by missing 'HttpOnly' flag. A remote attacker...

Security Bulletin: IBM Security SiteProtector System is affected by Cross-Site Scripting (CVE-2020-4140)

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Core XPU Vulnerability Details CVEID: CVE-2020-4140 DESCRIPTION: IBM SiteProtector Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We...

IBM Security SiteProtector System 信息泄露漏洞

The IBM Security SiteProtector System is a centralized management system from IBM USA, Inc. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or devices.A security vulnerability exists in the IBM SiteProtector Appliance that...

IBM Security SiteProtector System 跨站脚本漏洞

IBM Security SiteProtector System is a centralized management system from IBM USA. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or appliances. A security vulnerability exists in the IBM SiteProtector Appliance that allow...

Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities (CVE-2020-13938, CVE-2021-30641)

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2020-13938 DESCRIPTION: Apache HTTP Server is vulnerable to a denial of service, caused by the improper handling of insufficient privileges. A local attack...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.6.11 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified vulnerability in Jav...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.6.11 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An unspecified vulnerability in Jav...

Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in Apache HTTP Server. Vulnerability Details CVEID: CVE-2020-1927 DESCRIPTION: Apache HTTP Server could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0.6.5 used by IBM Security SiteProtector System. IBM Security SiteProtector System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition...