Red Hat Security Advisory

RHSA-2011:1794

Red Hat Network Satellite server security update

Released 2011-12-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Satellite 5.4 (RHEL v.5) spacewalk-base-1.2.7-21.el5sat, spacewalk-base-minimal-1.2.7-21.el5sat, spacewalk-dobby-1.2.7-21.el5sat +5
Red Hat Satellite 5.4 (RHEL v.6) spacewalk-base-1.2.7-21.el6sat, spacewalk-base-minimal-1.2.7-21.el6sat, spacewalk-dobby-1.2.7-21.el6sat +5

Fixes 1 record

TI-2011-03811 CVE-2011-4346 · GHSA-cx23-4vj7-xjv6

Satellite: xss in custom system information key handling

LOW 24

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Cu…

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.01244 Published 2011-12-10 Fixed in 1.2.7-21.el5sat CWE-79