The remote Symantec Data Center Security Server running on the remote host is affected by a reflected cross-site scripting vulnerability due to improper validation of input to the 'ErrorMsg' parameter in the '/webui/Khaki_docs/SSO-Error.jsp' script.

「/webui/Khaki_docs/SSO-Error.jsp」スクリプトの中の「ErrorMsg」パラメーターへの入力検証が不適切なために、リモートホストで実行されているリモートの Symantec Data Center Security Server が折り返し型クロスサイトスクリプティングの脆弱性に影響を受けています。

远程 Windows 主机上安装的 Symantec Critical System Protection (SCSP) 版本低于 5.2.9 MP6。因此，它受到多种漏洞的影响：

- 管理服务器代理控制界面中存在一个代码执行漏洞。应用程序未能正确验证从客户端系统上传的日志文件的内容。(CVE-2014-3440)

- 管理服务器中存在一个 SQL 注入漏洞。(CVE-2014-7289)

- 管理控制台服务器未正确过滤用户输入，这可导致非持久跨站脚本问题。(CVE-2014-9224)

- 管理服务器未正确限制内部服务器信息。(CVE-2014-9225)

- 默认保护策略未充分限制对某些主机功能的访问权限。
 (CVE-2014-9226)

请注意，CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 提供变通方案。

由于未正确验证对“/webui/Khaki_docs/SSO-Error.jsp”脚本中“ErrorMsg”参数的输入，远程主机上运行的远程 Symantec Data Center Security Server 受到反射式跨站脚本漏洞的影响。

遠端主機上執行的遠端 Symantec Data Center Security Server 受到一個反射性跨網站指令碼弱點影響，該弱點是因不當驗證 ‘/webui/Khaki_docs/SSO-Error.jsp’ 指令碼中 ‘ErrorMsg’ 參數的輸入所導致。

The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Management Server Agent Control Interface due to     improper sanitization of user-uploaded files. An     authenticated, remote attacker can exploit this, by     uploading a log file, to execute arbitrary script code     with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to the /sis-ui/authenticate script     not properly sanitizing user-supplied input to the 'ai'     POST parameter. An unauthenticated, remote attacker can     exploit this to inject or manipulate SQL queries in the     back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities     exist in the management server in the     WCUnsupportedClass.jsp script and SSO-Error.jsp script     due to improper validation of user-supplied input to the     'classname' and 'ErrorMsg' GET parameters. An     unauthenticated, remote attacker can exploit this to     execute arbitrary script code in a user's browser     session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the     management server due to a failure to properly restrict     internal server information. An authenticated, remote     attacker can exploit this, via a direct request to the     environment.jsp script, to disclose sensitive server     information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a     failure to sufficiently restrict access to certain host     functionality. A local attacker can exploit this to     bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to improper sanitization of     user-supplied input. An authenticated, remote attacker     can exploit this to inject or manipulate SQL queries in     the back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper     sanitization of user-supplied input. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary code.
    (CVE-2015-8798)

  - A path traversal issue exists that allows an     authenticated, remote attacker to write update-package     data to arbitrary agent locations, resulting in the     execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when     handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to     inject arbitrary arguments. (CVE-2015-8800)

遠端 Windows 主機上安裝的 Symantec Critical System Protection (SCSP) 版本比 5.2.9 MP6 舊。因此，會受到多個弱點影響：

- 管理伺服器代理程式控制介面中存在一個程式碼執行弱點。應用程式未正確驗證從用戶端系統上傳的記錄檔內容。(CVE-2014-3440)

- 管理伺服器中存在一個 SQL 插入弱點。(CVE-2014-7289)

- 管理主控台伺服器未正確篩選使用者輸入，可導致非持續的跨網站指令碼問題。(CVE-2014-9224)

- 管理伺服器未正確限制內部伺服器資訊。(CVE-2014-9225)

- 預設的保護原則未充分限制特定主機功能的存取權。
 (CVE-2014-9226)

請注意，已有 CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 的因應措施可供使用

The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. したがって、以下の複数の脆弱性による影響を受けます。

  - A remote code execution vulnerability exists in the Management Server Agent Control Interface due to improper sanitization of user-uploaded files. An authenticated, remote attacker can exploit this, by uploading a log file, to execute arbitrary script code with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the management server due to the /sis-ui/authenticate script not properly sanitizing user-supplied input to the 'ai' POST parameter. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities exist in the management server in the WCUnsupportedClass.jsp script and SSO-Error.jsp script due to improper validation of user-supplied input to the 'classname' and 'ErrorMsg' GET parameters. An unauthenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the management server due to a failure to properly restrict internal server information. An authenticated, remote attacker can exploit this, via a direct request to the environment.jsp script, to disclose sensitive server information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a failure to sufficiently restrict access to certain host functionality. A local attacker can exploit this to bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the management server due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper sanitization of user-supplied input. 認証されていないリモートの攻撃者がこれを悪用し、特別に細工されたリクエストで任意のコードを実行する可能性があります。
    (CVE-2015-8798)

  - A path traversal issue exists that allows an authenticated, remote attacker to write update-package data to arbitrary agent locations, resulting in the execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to inject arbitrary arguments. (CVE-2015-8800)

ID	Name	Product	Family	Published	Updated	Severity
81550	Symantec Data Center Security Server 'SSO-Error.jsp' XSS (SYM15-001)	Nessus	CGI abuses : XSS	2/26/2015	1/19/2021	low
81550	Symantec Data Center Security Server の「SSO-Error.jsp」の XSS（SYM15-001）	Nessus	CGI abuses : XSS	2/26/2015	1/19/2021	low
80911	Symantec Critical System Protection 管理服务器中的多个安全问题 (SYM15-001)	Nessus	Windows	1/22/2015	11/25/2019	high
81550	Symantec Data Center Security Server 'SSO-Error.jsp' XSS (SYM15-001)	Nessus	CGI abuses : XSS	2/26/2015	1/19/2021	low
81550	Symantec Data Center Security Server 'SSO-Error.jsp' XSS (SYM15-001)	Nessus	CGI abuses : XSS	2/26/2015	1/19/2021	low
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	1/22/2015	11/25/2019	high
80911	Symantec Critical System Protection 管理伺服器中有多個安全性問題 (SYM15-001)	Nessus	Windows	1/22/2015	11/25/2019	high
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	1/22/2015	11/25/2019	high

Detections

Analytics

Plugins Search

low

low

high

low

low

high

high

high