XSS in Red Hat Enterprise Linux
CVE-2011-4346
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.
Affected products
- Redhat Enterprise_linux — versions 5.0, 6.0
- Redhat Satellite — versions 5.4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)