Security Bulletin: Security vulnerabilities related to Cross-site scripting identified in Tivoli Integrated Portal shipped with Tivoli Network Manager IP Edition (CVE-2014-6151, CVE-2014-6152)

Summary Tivoli Network Manager IP Edition shipped with Tivoli Integrated Portal has released security vulnerability fixes. Vulnerability Details There are two vulnerabilities reported for Tivoli Integrated Portal on Cross-site scripting, as listed below. CVE ID: CVE-2014-6151 DESCRIPTION: HTTP...

CVE-2014-6151

CRLF injection vulnerability in IBM Tivoli Integrated Portal TIP 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-6151

CRLF injection vulnerability in IBM Tivoli Integrated Portal TIP 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-6151

CVE-2014-6151 : CRLF injection in IBM Tivoli Integrated Portal (TIP) 2.2.x allows remote authenticated users to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Affected: TIP bundled with Tivoli Network Manager (e.g., TIP 2.2.x in NM 4.1/4.1.1). Remediati...