CVE-2010-4120 Cross-site scripting in n/a

Medium 4.3 Published 28 Oct 2010 Updated 7 Aug 2024

Remote attackers can inject arbitrary web script or HTML into the TAM console via multiple parameters, potentially stealing user data or hijacking sessions.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2010-4120?

CVE-2010-4120 is a medium-severity cross-site scripting vulnerability in n/a, published on 28 Oct 2010. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.

Weakness: CWE-79

Which versions are affected by CVE-2010-4120?

It affects 1 product.

Products include Ibm Tivoli Access Manager for E-Business.

How do I fix CVE-2010-4120?

No fix has been published for CVE-2010-4120 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2010-4120 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-4120 exists.

Public exploit code: 11 Exploit-DB entries.

Sources

Also known as GHSA-2qvm-65xp-25xh.