2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2011-4345" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2011-11-30T04:05:58.717" ,
2024-11-22 13:11:49 +00:00
"lastModified" : "2024-11-21T01:32:16.767" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a cookie."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados XSS en Namazu antes de v2.0.21, cuando se usa Internet Explorer 6 o 7, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de una cookie."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N" ,
2024-11-22 13:11:49 +00:00
"baseScore" : 2.6 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "HIGH" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-11-22 13:11:49 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "LOW" ,
"exploitabilityScore" : 4.9 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.0.20" ,
"matchCriteriaId" : "2DABD090-5AD7-4C71-915A-E5380FA9BC87"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E9E6345-F6AF-4AC4-B9A5-54EDAB3E49CB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F17EB317-5BCF-4756-8F1E-FD3303BBC662"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "71C4F1F4-53D0-4EE4-8F6C-171E9B43A942"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "46FB42D2-C51A-4C2B-97DC-308246D7D853"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E70426F-C511-4582-BF05-448CCFB52607"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.15:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8FB99CD9-3892-4F06-AE5A-66741CE8201F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.16:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC5AC101-DF8C-4517-9F46-64E4201D2D9F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.17:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7CD2D7C9-9A19-4122-B2EF-EF7F53AC58C9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.18:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C77F8A22-1EF7-4C39-B220-0E459EB7E9C4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:namazu:namazu:2.0.19:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "33892F22-3F37-4D0A-8108-215397470880"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1A33FA7F-BB2A-4C66-B608-72997A2BD1DB"
}
]
}
]
}
] ,
"references" : [
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/46925" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.namazu.org/security.html#cross-site-scripting" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/50771" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=756348" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722" ,
"source" : "secalert@redhat.com"
2024-11-22 13:11:49 +00:00
} ,
{
"url" : "http://secunia.com/advisories/46925" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.namazu.org/security.html#cross-site-scripting" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/50771" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=756348" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
