CVE-2021-38961: XSS
IBM OPENBMC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38961?
CVE-2021-38961 is considered a moderate severity vulnerability due to its potential for credential disclosure through cross-site scripting.
How do I fix CVE-2021-38961?
To fix CVE-2021-38961, users should apply the latest patches released by IBM for OPENBMC OP910.
What type of attack can CVE-2021-38961 facilitate?
CVE-2021-38961 can facilitate cross-site scripting attacks that allow the injection of arbitrary JavaScript code.
Which versions of OPENBMC are affected by CVE-2021-38961?
CVE-2021-38961 affects IBM OPENBMC versions up to and including OP910.
Can CVE-2021-38961 lead to data theft?
Yes, CVE-2021-38961 can potentially lead to data theft through credential disclosure within trusted sessions.