CVE-2013-4098

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...

CVE-2013-4098

The CVE-2013-4098 entry concerns DS3 Authentication Server, where ServerAdmin/ErrorViewer.jsp accepts a message parameter that can be used to inject arbitrary error-page text. The public descriptions (NVD, Red Hat, CVE record) repeat this flaw, and an OpenVAS plugin notes DS3 has multiple vulnera...

PT-2013-4851

Name of the Vulnerable Software and Affected Versions DS3 Authentication Server affected versions not specified Description The issue allows remote attackers to inject arbitrary error-page text via the message parameter in the ServerAdmin/ErrorViewer.jsp page. Recommendations At the moment, there...

CVE-2013-4098: Improper Input Validation

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...