Detections
Analytics
Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)
medium Nessus Plugin ID 57767
Language:
Synopsis
An application hosted on the remote web server is affected by a cross-site scripting vulnerability.Description
The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting (XSS) vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to make a malicious request, resulting in the execution of arbitrary script code in the user's browser session.This version of Endpoint Protection Manager is affected by additional XSS and XSRF vulnerabilities; however, Nessus has not tested for these.
Solution
Upgrade to Symantec Endpoint Protection Manager 11 RU7 / 12.1 RU1 or later.See Also
http://www.nessus.org/u?e20e9bda
Plugin Details
Severity: Medium
ID: 57767
File Name: symantec_endpoint_prot_mgr_sym12-001.nasl
Version: 1.10
Type: remote
Family: CGI abuses : XSS
Published: 2/1/2012
Updated: 6/5/2024
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:symantec:endpoint_protection_manager
Required KB Items: www/sep_mgr
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/16/2012
Vulnerability Publication Date: 8/10/2011
Reference Information
CVE: CVE-2011-0550
BID: 48231