Red Hat Security AdvisoryRHSA-2016:1484
spacewalk-java security and bug fix update
Released 2016-07-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 5.7 (RHEL v.6) spacewalk-java-2.3.8-147.el6sat, spacewalk-java-config-2.3.8-147.el6sat, spacewalk-java-lib-2.3.8-147.el6sat +3
Fixes 2 records
Priority LOW 29
Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01071 · Published 2016-08-05 · Fixed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the (1) RHNMD User or (2) Filesystem parameters, related to display o…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01071 · Published 2016-08-05 · Partial fix CWE-79
