CVE:CVE-2008-4119
CNNVD:CNNVD-200809-383
CA Service Desk是企业级的服务台解决方案。
CA Service Desk没有安全的处理多个web表单所传送的变量，如果用户受骗跟随了恶意链接的话就可能导致跨站脚本攻击。
solution:Upgrade broadcom service_desk to a higher version than 11.2,and avoid the version 11.2; Upgrade ca cmdb to a higher version than 11.0,11.1,11.2,and avoid the version 11.0,11.1,11.2