Vulnerability Bulletins |
IBM Security Bulletin: IBM Cloud Manager with OpenStack Dashboard Cross-site Scripting (XSS) Vulnerabilities (CVE-2014-3594) |
|
| Affected software | IBM |
|
IBM Cloud Manager with OpenStack Dashboard (Horizon) is vulnerable to cross-site scripting, a remote attacker could use this vulnerability to steal the victims cookie-based authentication credentials. CVE(s): CVE-2014-5356 and CVE-2014-3594 Affected product(s) and affected version(s): IBM Cloud Manager with OpenStack 4.1.0 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_cloud_manager_with_openstack_dashboard_cross_site_scripting_xss_vulnerabilities_cve_2014_3594?lang=en_us |
|