CIA RESEARCH

Alerts

[CIA-1048-Alert] IBM Tivoli Business Systems Manager Cross Site Scripting

Summary:

A flaw in the IBM Tivoli Business Systems Manager allows a remote attacker to launch cross site scripting attacks.

Technical Details:

The IBM Tivoli Business Systems Manager version 3.1 lacks sufficient input validation in one of its .jsp scripts, allowing cross site scripting to occur. The script 'apwc_win_main.jsp' fails to properly santize user input in the "skin=" parameter, and possibly others. The example URL below shows where the the attacker can insert malicious code.

targetserver/TbsmWebConsole/help/en/jsp/apwc_win_main.jsp?skin=SCRIPT CODE

The script code will execute in the target user's browser with the privileges associated with the Tivoli Business systems Manager. Cross Site Scripting attacks allow the attacker to steal user cookies, redirect the user to potentially dangerous content, and possibly exploit other browser-based flaws.

Solution:

IBM has provided a security fix (LA interim fix, 3.1.0.1-TIV-BSM-LA0112 and LA interim fix, 3.1.0.1-TIV-BSM-LA0116). Additional information is available in the vendor advisory:

http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904

CVE Reference:

GENERIC MAP NOMATCH

SecurityTracker Number(s):

1015822

Vendor URL:

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC