XSS-String Vulnerability
We have recently installed ADAuditPlus in our environment and a security scanner has discovered a vulnerability within within this tool. This vulnerability has been documented online (
CVE-2010-2049) and is described as the following:
"
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.”
I was wondering if there has been a solution or patch developed for this security hole yet.
Thanks
Topic Participants
Gassmann, Andrew
Guna P
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?