Microsoft UDDI Services Elevation of Privilege Vulnerability
Last Update Date:
14 Aug 2015
Release Date:
12 Aug 2015
3157
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
An elevation of privilege exists in Microsoft Windows when the Universal Description, Discovery, and Integration (UDDI) Services improperly validate or sanitize the search parameter in a FRAME tag. An attacker who successfully exploited this vulnerability could leak authorization cookies or unexpectedly redirect a user to a malicious webpage.
Impact
- Elevation of Privilege
System / Technologies affected
- Microsoft Windows Server 2008
- Microsoft BizTalk Server 2010
- Microsoft BizTalk Server 2013
- Microsoft BizTalk Server 2013 R2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-087
Vulnerability Identifier
Source
Related Link
Share with