Security Bulletin: IBM SONAS fix available for Cross Frame Scripting vulnerability via Graphical User Interface (CVE-2013-5376)

Abstract An issue in IBM SONAS allows remote attackers to access the system as an authorized administrative user. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-5376 DESCRIPTION: An error in the IBM SONAS Graphical User Interface results in a Cross Frame Scripting vulnerability which can be used...

CVE-2013-5376

IBM Storwize V7000 Unified (1.3.0.0–1.4.1.1) is affected by CVE-2013-5376 due to a Cross Frame Scripting flaw in the Graphical User Interface that can allow a remote authenticated user to access the system as an authenticated administrator. The vulnerability is fixed starting with version 1.4.2.0...