CVE-2010-0704

Vulnerability

The Portlet Palette component in IBM WebSphere Portal version 6.0.1.5 (wp6015_008_01) is susceptible to a cross-site scripting (XSS) vulnerability in the search field. The application fails to properly sanitize user-supplied input before reflecting it back to the browser, allowing an attacker to inject arbitrary web script or HTML [1].

Exploitation

To exploit this vulnerability, an attacker must be an authenticated user of the WebSphere Portal. By crafting a malicious search query containing JavaScript or HTML payloads and submitting it via the Portlet Palette search field, the attacker's input is executed in the context of the victim's session when the results are displayed [1].

Impact

Successful exploitation enables an authenticated attacker to execute arbitrary web script or HTML in the browser of another authenticated user. This can lead to session hijacking, defacement of the portal interface, or theft of sensitive information within the portal's security context [1].

Mitigation

IBM has released a fix as documented in APAR PM05829, applicable to WebSphere Portal version 6.0.1.5 (component level R60J PSY UP). Administrators should apply the provided patch to remediate the vulnerability. No workarounds are mentioned in the available references [1].