Cross-site Scripting (XSS)

2019-01-1509:03:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

mod_cluster is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message

CPENameOperatorVersion
tomcat-nativeeq1.1.23__4.1.ep6.el5
tomcat-nativeeq1.1.27__4.redhat_1.ep6.el6
tomcat-nativeeq1.1.24__1.ep6.el6
tomcat-nativeeq1.1.27__4.redhat_1.ep6.el5
tomcat-nativeeq1.1.32__2.redhat_2.ep7.el7
tomcat-nativeeq1.1.24__1.1.ep6.el5
tomcat-nativeeq1.1.20__2.1.2.ep5.el6
tomcat-nativeeq1.1.23__4.ep6.el6
tomcat-nativeeq1.1.30__2.redhat_1.ep6.el7
tomcat-nativeeq1.1.30__2.redhat_1.ep6.el5

Name	Operator	Version
tomcat-native	eq	1.1.23__4.1.ep6.el5
tomcat-native	eq	1.1.27__4.redhat_1.ep6.el6
tomcat-native	eq	1.1.24__1.ep6.el6
tomcat-native	eq	1.1.27__4.redhat_1.ep6.el5
tomcat-native	eq	1.1.32__2.redhat_2.ep7.el7
tomcat-native	eq	1.1.24__1.1.ep6.el5
tomcat-native	eq	1.1.20__2.1.2.ep5.el6
tomcat-native	eq	1.1.23__4.ep6.el6
tomcat-native	eq	1.1.30__2.redhat_1.ep6.el7
tomcat-native	eq	1.1.30__2.redhat_1.ep6.el5