JVN Info.

Id
18382  
Name
JVNDB-2014-007257  
Title
Splunk Enterprise の Splunk Web の Dashboard におけるクロスサイトスクリプティングの脆弱性  
Summary
Splunk Enterprise の Splunk Web の Dashboard には、クロスサイトスクリプティングの脆弱性が存在します。  
Nvdinfo
CVE-2014-5466  
Cvssv2
4.3  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007257.html  
Published Date
2014-11-19  
Registered Date
2014-12-19  
Last Updated Date
2014-12-19  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
20827 H28-MOJ-Teikyo-Nara-17-seg-2-20161128-w510.csv 18382 90710 CVE-2016-2076 5.8 Medium 172.30.201.69 tcp 443 VMware vCenter Server 5.5.x < 5.5u3d / 6.0.x < 6.0u2 Client Integration Plugin Session Hijacking (VMSA-2016-0004) A virtualization management application installed on the remote host is affected by a session hijacking vulnerability. The version of VMware vCenter Server installed on the remote host is 5.5.x prior to 5.5u3d or 6.0.x prior to 6.0u2. It is, therefore, affected by a flaw in the VMware Client Integration Plugin due to a failure to handle session content in a secure manner. A remote attacker can exploit this, by convincing a user to visit a malicious web page, to conduct a session hijacking attack. It can also be exploited to carry out a man-in-the-middle attack. Upgrade to VMware vCenter Server version 5.5u3d (5.5.0 build-3721164) / 6.0u2 (6.0.0 build-3634788) or later. https://www.vmware.com/security/advisories/VMSA-2016-0004.html Installed version : 6.0.0 build-3018524 Fixed version : 6.0.0 build-3634788
43911 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 18382 90710 CVE-2016-2076 5.8 Medium 172.30.138.69 tcp 443 VMware vCenter Server 5.5.x < 5.5u3d / 6.0.x < 6.0u2 Client Integration Plugin Session Hijacking (VMSA-2016-0004) A virtualization management application installed on the remote host is affected by a session hijacking vulnerability. The version of VMware vCenter Server installed on the remote host is 5.5.x prior to 5.5u3d or 6.0.x prior to 6.0u2. It is, therefore, affected by a flaw in the VMware Client Integration Plugin due to a failure to handle session content in a secure manner. A remote attacker can exploit this, by convincing a user to visit a malicious web page, to conduct a session hijacking attack. It can also be exploited to carry out a man-in-the-middle attack. Upgrade to VMware vCenter Server version 5.5u3d (5.5.0 build-3721164) / 6.0u2 (6.0.0 build-3634788) or later. https://www.vmware.com/security/advisories/VMSA-2016-0004.html Installed version : 6.0.0 build-3018524 Fixed version : 6.0.0 build-3634788