CVE-2012-2094

Related Files

Ubuntu Security Notice USN-1439-1

Posted May 7, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1439-1 - Matthias Weckbecker discovered a cross-site scripting (XSS) vulnerability in Horizon via the log viewer refresh mechanism. If a user were tricked into viewing a specially crafted log message, a remote attacker could exploit this to modify the contents or steal confidential data within the same domain. Thomas Biege discovered a session fixation vulnerability in Horizon. An attacker could exploit this to potentially allow access to unauthorized information and capabilities. Various other issues were also addressed.

tags | advisory, remote, xss

systems | linux, ubuntu

advisories | CVE-2012-2094, CVE-2012-2144, CVE-2012-2094, CVE-2012-2144

SHA-256 | 7b70699a65f9988c4c343caffced00dfe13277d783584ab531944622f4ea9fba

Download | Favorite | View