ID de Prueba:	1.3.6.1.4.1.25623.1.0.809794
Categoría:	VMware Local Security Checks
Título:	VMware vRealize Automation Cross-Site Scripting Vulnerability (VMSA-2016-0003)
Resumen:	VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability.
Descripción:	Summary: VMware vRealize Automation is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists as software does not properly filter HTML code from user-supplied input before displaying the input. Vulnerability Impact: Successful exploitation will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application, potentially allowing the attacker to steal cookie-based authentication credentials or control how the page is rendered to the user. Affected Software/OS: VMware vRealize Automation versions 6.x prior to 6.2.4 on Linux. Solution: Upgrade to VMware vRealize Automation version 6.2.4 Build 3624994 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2344 http://www.securitytracker.com/id/1035270
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.