CVE-2008-0578 Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tripwire enterprise | = 7.0 | No fix listed |
References
- 28687 third-party-advisory vendor-advisory
- 3610 third-party-advisory
- www.liquidmatrix.org
- 20080129 Advisory: Tripwire Enterprise/Server XSS Vulnerability mailing-list
- 27486 vdb-entry
- 1019279 vdb-entry
- ADV-2008-0372 vdb-entry
- tripwire-login-xss(40016) vdb-entry