Red Hat Security AdvisoryRHSA-2015:0033
Red Hat Satellite 5.7.0 General Availability
Released 2015-01-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 5.7 (RHEL v.6) MessageQueue-3.26.10-1.el6sat, NOCpulsePlugins-2.209.7-1.el6sat, NOCpulsePlugins-Oracle-2.209.7-1.el6sat +47
- Red Hat Satellite Managed DB 5.7 (RHEL v.6) perl-Filesys-Df-0.92-8.el6sat, postgresql92-1.1-21.el6, postgresql92-postgresql-9.2.8-2.el6 +12
Fixes 2 records
Priority LOW 20
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01463 · Published 2015-01-15 · Fixed CWE-79
Priority LOW 20
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST A…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01463 · Published 2015-01-15 · Fixed CWE-79