Lucene search

[email protected]NVD:CVE-2012-3238

HistoryJul 09, 2012 - 10:55 p.m.

CVE-2012-3238

2012-07-0922:55:01

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

70.3%

JSON

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the “Comment (optional)” field.

Affected configurations

Nvd

Node

astarosecurity_gateway_softwareRange≤8.3

AND

astarosecurity_gateway

Node

sophosunified_threat_management_softwareRange≤8.3

AND

sophosunified_threat_managementMatch110

sophosunified_threat_managementMatch120

sophosunified_threat_managementMatch220

sophosunified_threat_managementMatch320

sophosunified_threat_managementMatch425

sophosunified_threat_managementMatch525

sophosunified_threat_managementMatch625

VendorProductVersionCPE
astarosecurity_gateway_software*cpe:2.3:a:astaro:security_gateway_software:*:*:*:*:*:*:*:*
astarosecurity_gateway*cpe:2.3:h:astaro:security_gateway:*:*:*:*:*:*:*:*
sophosunified_threat_management_software*cpe:2.3:a:sophos:unified_threat_management_software:*:*:*:*:*:*:*:*
sophosunified_threat_management110cpe:2.3:h:sophos:unified_threat_management:110:*:*:*:*:*:*:*
sophosunified_threat_management120cpe:2.3:h:sophos:unified_threat_management:120:*:*:*:*:*:*:*
sophosunified_threat_management220cpe:2.3:h:sophos:unified_threat_management:220:*:*:*:*:*:*:*
sophosunified_threat_management320cpe:2.3:h:sophos:unified_threat_management:320:*:*:*:*:*:*:*
sophosunified_threat_management425cpe:2.3:h:sophos:unified_threat_management:425:*:*:*:*:*:*:*
sophosunified_threat_management525cpe:2.3:h:sophos:unified_threat_management:525:*:*:*:*:*:*:*
sophosunified_threat_management625cpe:2.3:h:sophos:unified_threat_management:625:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
astaro	security_gateway_software	*	cpe:2.3:a:astaro:security_gateway_software::::::::
astaro	security_gateway	*	cpe:2.3:h:astaro:security_gateway::::::::
sophos	unified_threat_management_software	*	cpe:2.3:a:sophos:unified_threat_management_software::::::::
sophos	unified_threat_management	110	cpe:2.3:h:sophos:unified_threat_management:110:::::::*
sophos	unified_threat_management	120	cpe:2.3:h:sophos:unified_threat_management:120:::::::*
sophos	unified_threat_management	220	cpe:2.3:h:sophos:unified_threat_management:220:::::::*
sophos	unified_threat_management	320	cpe:2.3:h:sophos:unified_threat_management:320:::::::*
sophos	unified_threat_management	425	cpe:2.3:h:sophos:unified_threat_management:425:::::::*
sophos	unified_threat_management	525	cpe:2.3:h:sophos:unified_threat_management:525:::::::*
sophos	unified_threat_management	625	cpe:2.3:h:sophos:unified_threat_management:625:::::::*

References

archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html

security.inshell.net/advisory/27

www.astaro.com/en-uk/blog/up2date/8305

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

70.3%

JSON

Related for NVD:CVE-2012-3238

cvelist1 cve1 prion1