Vulnerability Bulletins |
IBM Security Bulletin: Multiple XSS vulnerabilities in IBM Cloud Manager with OpenStack Horizon (CVE-2014-3473, CVE-2014-3474, CVE-2014-3475) |
|
| Affected software | IBM |
|
IBM Cloud Manager with OpenStack is vulnerable to multiple OpenStack Horizon XSS issues which could allow a remote attacker steal the victims cookie-based authentication credentials. CVE(s): CVE-2014-3473, CVE-2014-3474 and CVE-2014-3475 Affected product(s) and affected version(s): IBM Cloud Manager with OpenStack 4.1.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1021820 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_xss_vulnerabilities_in_ibm_cloud_manager_with_openstack_horizon_cve_2014_3473_cve_2014_3474_cve_2014_3475?lang=en_us |
|