CVE-2010-4324: XSS
First published: Fri Jan 07 2011(Updated: )
Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell Identity Manager Roles Based Provisioning Module | <=3.7.0 | |
| Micro Focus Identity Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.novell.com/show_bug.cgi?id=653516
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html
- http://secunia.com/advisories/42819
- http://www.vupen.com/english/advisories/2011/0038
- http://osvdb.org/70298
- http://www.securitytracker.com/id?1024941
- http://www.securityfocus.com/bid/45692
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64501
Frequently Asked Questions
What is the severity of CVE-2010-4324?
CVE-2010-4324 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2010-4324?
To fix CVE-2010-4324, upgrade to Novell Identity Manager Roles Based Provisioning Module version 3.7.0 or later.
What systems are affected by CVE-2010-4324?
CVE-2010-4324 affects Novell Identity Manager Roles Based Provisioning Module versions prior to 3.7.0.
What type of vulnerability is CVE-2010-4324?
CVE-2010-4324 is a cross-site scripting (XSS) vulnerability.
Can CVE-2010-4324 be exploited remotely?
Yes, CVE-2010-4324 can be exploited remotely by attackers injecting arbitrary web scripts or HTML.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/novell
- canonical/novell identity manager roles based provisioning module
- version/novell identity manager roles based provisioning module/3.7.0
- canonical/micro focus identity manager