Release Notes › Web Agent Release Notes › Defects Fixed in r12.0 SP2 › Cross-site Scripting Vulnerability with %00 Character Sequence (69191)

Previous Topic: Receiving Zero-length Packet While Chunk Encoding Terminated Web Agent Abnormally (64954)

Next Topic: Remind me Later Button Did Not Validate Domain (67561)

Cross-site Scripting Vulnerability with %00 Character Sequence (69191)

Valid on IIS 6.0, and re-architected Apache 2.0 or Sun Java System Web Agents

Symptom:

A cross-site scripting attack vulnerability existed with the use of the %00 character sequence.

Solution:

This is no longer an issue.

STAR Issue: 17042893:1

Copyright © 2010 CA. All rights reserved. Email CA about this topic