Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=100749428517090&w=2 | |
| http://www.securityfocus.com/bid/3619 | Patch Vendor Advisory |
| http://www.valicert.com/support/security_advisory_eva.html | Vendor Advisory URL Repurposed |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7650 | |
| http://marc.info/?l=bugtraq&m=100749428517090&w=2 | |
| http://www.securityfocus.com/bid/3619 | Patch Vendor Advisory |
| http://www.valicert.com/support/security_advisory_eva.html | Vendor Advisory URL Repurposed |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/7650 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=100749428517090&w=2 - | |
| References | () http://www.securityfocus.com/bid/3619 - Patch, Vendor Advisory | |
| References | () http://www.valicert.com/support/security_advisory_eva.html - Vendor Advisory, URL Repurposed | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/7650 - |
14 Feb 2024, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) http://www.valicert.com/support/security_advisory_eva.html - Vendor Advisory, URL Repurposed |
Information
Published : 2001-12-04 05:00
Updated : 2024-11-20 23:36
NVD link : CVE-2001-0948
Mitre link : CVE-2001-0948
CVE.ORG link : CVE-2001-0948
JSON object : View
Products Affected
valicert
- enterprise_validation_authority
CWE