Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-4046
PUBLISHED
More InfoOfficial Page
Assigner-INCIBE
Assigner Org ID-0cbda920-cd7f-484a-8e76-bf7f4b7f4516
View Known Exploited Vulnerability (KEV) details
Published At-11 Feb, 2022 | 17:40
Updated At-17 Sep, 2024 | 03:33
Rejected At-
▼CVE Numbering Authority (CNA)
TCMAN GIM Cross-Site Scripting (XSS)

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.

Affected Products
Vendor
TCMAN
Product
GIM
Default Status
unaffected
Versions
Affected
  • 8.01
Problem Types
TypeCWE IDDescription
CWECWE-79CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Type: CWE
CWE ID: CWE-79
Description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Metrics
VersionBase scoreBase severityVector
3.15.4MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Version: 3.1
Base score: 5.4
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

This vulnerability has been solved by TCMAN in GIM v8.0.1 Release 31734.

Configurations
Workarounds
Exploits
Credits
finder
Pablo Arias Rodríguez and Jorge Alberto Palma Reyes
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss
x_refsource_CONFIRM
Hyperlink: https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss
Resource:
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss
x_refsource_CONFIRM
x_transferred
Hyperlink: https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss
Resource:
x_refsource_CONFIRM
x_transferred
Details not found