|
Description
|
|
Vulnerability Research Laboratory has reported multiple vulnerabilities in Hyperic HQ Enterprise, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
1) Input passed via the "escId" parameter to admin/config/Config.do (when "mode" is set to "escalate") is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
2) Certain unspecified input sent from the Hyperic Agent is not properly sanitised in the roles listing under administration, the HQ Health view under administration, the monitor view for a specific host, the applications view under resources, and the general properties view for the logged in user before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.
3) The application's web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change an administrator's password by tricking a logged in administrator into visiting a malicious web site.
The vulnerabilities are reported in version 4.5.1. Other versions may also be affected.
|
