4.6Orta
CVE-2011-4346Satellite: xss in custom system information key handling
Açıklama
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| network satellite | 5.4 | — | |
| Red Hat | Red Hat Network Satellite Server v 5.4 | all versions | |
| Red Hat | Red Hat Satellite 6 | — | |
| redhat | satellite | 5.4.1 |
Kaynaklar ve yamalar
- http://secunia.com/advisories/47162 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-1794.html PatchVendor Advisory
- http://www.securityfocus.com/bid/50963 Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1026391 Third Party AdvisoryVDB Entry
- RHSA-2011:1794 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2011-4346 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:redhat:satellite:5.4.1:*:*:*:*:*:*:*