Telos Automated Message Handling System contains multiple vulnerabilities

mood · Dec 19, 2019

Telos Automated Message Handling System contains multiple vulnerabilities
Vulnerability Note VU#873161
December 19, 2019
https://kb.cert.org/vuls/id/873161/

Overview
Telos Automated Message Handling System (AMHS) contains multiple XSS vulnerabilities and a database information disclosure vulnerability.
Description
Telos AMHS is a web-based messaging system that supports DoD and Intelligence Community (IC) security marking requirements. AMHS versions prior to version 4.1.5.5 contain multiple XSS vulnerabilities and also fail to properly restrict access to information about other users on the system.
Impact
By creating a specially-crafted AMHS URI, an attacker may be able to inject arbitrary JavaScript into an AMHS session or access information about other AMHS users.
Solution
Apply an update These issues are addressed in AMHS version 4.1.5.5. Please contact Telos for update availability.
Click to expand...

Log in or Sign up

Telos Automated Message Handling System contains multiple vulnerabilities

mood Updates Team

Log in or Sign up

Telos Automated Message Handling System contains multiple vulnerabilities

mood Updates Team

Useful Searches