XSS in 7t Igss
CVE-2011-3339
Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.013 (69.3th percentile) — read the EPSS interpretation.
Affected products
- 7t Igss — versions 7
- Mozilla Firefox — versions 2.0
- Safenet-inc Sentinel_hasp_run-time
- Safenet-inc Sentinel_hasp_sdk
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (vdb-entry, x_refsource_BID)