CVE-2024-52942: XSS
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52942?
CVE-2024-52942 is classified as a high severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2024-52942?
To mitigate CVE-2024-52942, upgrade to Veritas Enterprise Vault version 15.1 UPD882911 or later.
What impact does CVE-2024-52942 have on affected systems?
CVE-2024-52942 allows an authenticated attacker to inject parameters into HTTP requests, resulting in XSS while viewing archived content.
Who is affected by CVE-2024-52942?
CVE-2024-52942 affects users of Veritas Enterprise Vault versions earlier than 15.1 UPD882911.
Is there a workaround for CVE-2024-52942 before updating?
Currently, there are no published workarounds for CVE-2024-52942, and the best course of action is to update the affected software.