Bug 1373344 – CVE-2016-7033 JBoss bpms: stored XSS in dashbuilder

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1373344 - (CVE-2016-7033) CVE-2016-7033 JBoss bpms: stored XSS in dashbuilder

Summary:	CVE-2016-7033 JBoss bpms: stored XSS in dashbuilder

Status:	CLOSED ERRATA

Aliases:	CVE-2016-7033

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20160906,reported=2...
Keywords:	Security

Depends On:
Blocks:	1373338 1412839
	Show dependency tree / graph

Reported:	2016-09-06 00:26 EDT by Jeremy Choi
Modified:	2017-02-06 14:42 EST (History)
CC List:	15 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:	JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via dashbuilder. Remote, authenticated attackers that have privileges to access dashbuilder (usually admins) can store scripts in several editable fields, which are not properly sanitized before showing to other users, including other admins.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-02-06 14:42:25 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2017:0249	normal	SHIPPED_LIVE	Moderate: Red Hat JBoss BPM Suite security update	2017-02-02 20:33:32 EST

Groups: None (edit)

Description Jeremy Choi 2016-09-06 00:26:50 EDT

Multiple stored XSS have been found in admin pages in jbpms 6.3.2 dashbuilder.

The vulnerable points are only accessible by admins so the risk is low, however, attackers may be able to exploit them combining with other vulnerabilities.

Comment 1 Jeremy Choi 2016-09-06 00:27:03 EDT

Acknowledgments:

Name: Jeremy Choi (Red Hat Product Security Team)

Comment 7 errata-xmlrpc 2017-02-02 15:43:19 EST

This issue has been addressed in the following products:

  Red Hat JBoss BPM Suite 6.4.1

Via RHSA-2017:0249 https://rhn.redhat.com/errata/RHSA-2017-0249.html

Note You need to log in before you can comment on or make changes to this bug.