IBM Security Bulletin: Cross-Site Scripting vulnerability affects IBM Security Guardium (CVE-2017-1256)

Cross-site scripting vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Security Guardium has fixed this vulnerability

CVE(s): CVE-2017-1256

Affected product(s) and affected version(s):

IBM Security Guardium V10.0, 10.0.1, 10.1, 10.1.2.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ttpNXU
X-Force Database: http://ift.tt/2urz8fU

The post IBM Security Bulletin: Cross-Site Scripting vulnerability affects IBM Security Guardium (CVE-2017-1256) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2ttCnXc