CVE-2012-1114

MÉDIO 6.1CVE-2012-1114 · Published 05/12/2019 · updated 16/06/2026

Em resumo

CVE-2012-1114 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta ldap account manager (ldap-account-manager).
Chance de exploração nos próximos 30 dias (EPSS): 1.6%, maior que 75.5% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
ldap account manager ldap-account-manager	`= 3.6`	No fix yet

Description

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.

References

lists.fedoraproject.org/pipermail/package-announce/2012-October/089297.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-October/089313.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html · Third Party Advisory
openwall.com/lists/oss-security/2012/03/05/24 · Mailing List
openwall.com/lists/oss-security/2012/03/12/1 · Mailing List
openwall.com/lists/oss-security/2012/03/12/10 · Mailing List
securityfocus.com/bid/52255 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/73971 · Third Party Advisory
security-tracker.debian.org/tracker/CVE-2012-1114 · Third Party Advisory

Mais vulnerabilidades de ldap account manager

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ldap account manager

ldap-account-manager

= 3.6

No fix yet

Mais vulnerabilidades de ldap account manager

Ver tudo →