CVE-2017-1521: XSS

Published Oct 26, 2017

Updated

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129831.

Affected Software

2 affected components

IBM BigFix Platform=9.2

IBM BigFix Platform=9.5

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22009673

Event History

Oct 26, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-1521?

CVE-2017-1521 is classified as a medium-severity vulnerability due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2017-1521?

To fix CVE-2017-1521, update IBM BigFix Platform to the latest versions, specifically versions 9.2 and 9.5 that include patches for this vulnerability.

What type of vulnerability is CVE-2017-1521?

CVE-2017-1521 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary JavaScript into the web interface.

Which platforms are affected by CVE-2017-1521?

CVE-2017-1521 affects IBM BigFix Platform versions 9.2 and 9.5.

What can an attacker do with CVE-2017-1521?

An attacker utilizing CVE-2017-1521 can embed arbitrary JavaScript in the Web UI, potentially altering functionality or stealing user data.