CVE-2011-1825: XSS
First published: Wed May 04 2011(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the Administrative Console in CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CA Arcot WebFort Versatile Authentication Server | <=6.2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/44317
- http://osvdb.org/72124
- http://www.securityfocus.com/bid/47587
- http://www.securitytracker.com/id?1025444
- http://www.vupen.com/english/advisories/2011/1114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67104
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={A71F5839-D214-4719-B918-4476E4537998}
- http://www.securityfocus.com/archive/1/517702/100/0/threaded
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BA71F5839-D214-4719-B918-4476E4537998%7D
Frequently Asked Questions
What is the severity of CVE-2011-1825?
CVE-2011-1825 has been classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2011-1825?
To fix CVE-2011-1825, upgrade to CA Arcot WebFort Versatile Authentication Server version 6.2.5 or later.
What are the risks associated with CVE-2011-1825?
The risks associated with CVE-2011-1825 include unauthorized access and the ability of attackers to inject malicious scripts into the system.
What systems are affected by CVE-2011-1825?
CVE-2011-1825 affects CA Arcot WebFort Versatile Authentication Server versions prior to 6.2.5.
Can CVE-2011-1825 be exploited remotely?
Yes, CVE-2011-1825 can be exploited remotely due to the nature of the cross-site scripting vulnerabilities.
- agent/author
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- vendor/ca
- canonical/ca arcot webfort versatile authentication server
- version/ca arcot webfort versatile authentication server/6.2.4