CA Automic Workload Automation 12.x Cross Site Scripting

Discussion in 'News Aggregator' started by Packet Storm, 25 Jan 2019.

  1. Packet Storm

    Packet Storm Guest

    CA Technologies Support is alerting customers to a potential risk with CA Automic Workload Automation Automic Web Interface (AWI). A vulnerability exists that can allow an attacker to potentially conduct persistent cross site scripting (XSS) attacks. The vulnerability has a medium risk rating and concerns insufficient output sanitization, which can allow an attacker to potentially conduct persistent cross site scripting (XSS) attacks. Versions 12.0, 12.1 and 12.2 are affected.

    Continue reading...
     

Share This Page

Loading...