CVE:CVE-2007-3623
CNNVD:CNNVD-200707-130
Hitachi JP1/HiCommand驱动程序管理器,Tiered Storage管理器,Replication监控器,和GlobalLink Availability管理器20070528版本之前的版本中存在跨站脚本攻击漏洞。远程攻击者可以借助Expect HTTP页眉，注入任意web脚本或HTML。
solution:Upgrade hitachi jp1-hicommand_device_manager to a higher version than 02_30,05_00,05_10,05_50,and avoid the version 02_30,05_00,05_10,05_50; Upgrade hitachi jp1-hicommand_global_link_availability_manager to a higher version than 05_00,and avoid the version 05_00; Upgrade hitachi jp1-hicommand_replication_monitor to a higher version than 04_00,05_00,05_50,and avoid the version 04_00,05_00,05_50; Upgrade hitachi jp1-hicommand_tiered_storage_manager to a higher version than 04_00,04_30,05_00,05_50,and avoid the version 04_00,04_30,05_00,05_50