{"containers": {"cna": {"affected": [{"product": "BlackICE PC Protection", "vendor": "ISS", "versions": [{"status": "affected", "version": "n/a"}]}], "credits": [{"lang": "en", "value": "Marc Ruef"}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-07-03T22:16:30", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://vuldb.com/?id.104"}, {"tags": ["x_refsource_MISC"], "url": "http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt"}, {"tags": ["x_refsource_MISC"], "url": "http://www.cgisecurity.com/articles/xss-faq.shtml"}], "tags": ["unsupported-when-assigned"], "title": "ISS BlackICE PC Protection Cross Site Scripting Detection privileges management", "x_generator": "vuldb.com", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2003-5001", "REQUESTER": "cna@vuldb.com", "STATE": "PUBLIC", "TITLE": "ISS BlackICE PC Protection Cross Site Scripting Detection privileges management"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "BlackICE PC Protection", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "ISS"}]}}, "credit": "Marc Ruef", "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."}]}, "generator": "vuldb.com", "impact": {"cvss": {"baseScore": "5.3", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-269 Improper Privilege Management"}]}]}, "references": {"reference_data": [{"name": "https://vuldb.com/?id.104", "refsource": "MISC", "url": "https://vuldb.com/?id.104"}, {"name": "http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt", "refsource": "MISC", "url": "http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt"}, {"name": "http://www.cgisecurity.com/articles/xss-faq.shtml", "refsource": "MISC", "url": "http://www.cgisecurity.com/articles/xss-faq.shtml"}]}}}}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2003-5001", "datePublished": "2022-03-28T20:45:43", "dateReserved": "2022-01-28T00:00:00", "dateUpdated": "2022-07-03T22:16:30", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:iss_blackice_pc_protection:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FE92ADF-24D4-4B3D-9C9B-2409DD21E3E8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"}, {"lang": "es", "value": "** NO SOPORTADO CUANDO DE ASIGN\u00d3 ** Se ha encontrado una vulnerabilidad en ISS BlackICE PC Protection y Ha sido clasificada como cr\u00edtica. Este problema afecta al componente Cross Site Scripting Detection. La manipulaci\u00f3n como parte de la petici\u00f3n POST/PUT/DELETE/OPTIONS conlleva a una escalada de privilegios. El ataque puede ser lanzado remotamente. La explotaci\u00f3n ha sido divulgada al p\u00fablico y puede ser usada. Es recomendado actualizar el componente afectado. NOTA: Esta vulnerabilidad s\u00f3lo afecta a productos que ya no son soportados por el mantenedor"}], "id": "CVE-2003-5001", "lastModified": "2024-05-17T00:21:52.063", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}]}, "published": "2022-03-28T21:15:07.863", "references": [{"source": "psirt@us.ibm.com", "url": "http://www.cgisecurity.com/articles/xss-faq.shtml"}, {"source": "psirt@us.ibm.com", "url": "http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt"}, {"source": "psirt@us.ibm.com", "url": "https://vuldb.com/?id.104"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-269"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}