First published: Wed Mar 06 2013(Updated: )
Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Tivoli Application Dependency Discovery Manager | =7.2.0.0 | |
IBM Tivoli Application Dependency Discovery Manager | =7.2.1 | |
IBM Tivoli Application Dependency Discovery Manager | =7.2.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-5942 is considered to have a medium severity due to its potential for cross-site scripting attacks.
To fix CVE-2012-5942, update IBM Tivoli Application Dependency Discovery Manager to version 7.2.1.4 or later.
CVE-2012-5942 affects remote authenticated users of IBM Tivoli Application Dependency Discovery Manager versions 7.2.0.0, 7.2.1, and 7.2.1.3.
CVE-2012-5942 is a cross-site scripting (XSS) vulnerability.
Attackers can exploit CVE-2012-5942 to inject malicious scripts and conduct phishing attacks.