TI-2017-05157 CVE-2017-7514 · GHSA-cqmg-98pc-948m
Cross-site scripting in Red Hat Satellite
Priority LOW 25
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0.
RHSA-2017:1558
Red Hat Satellite 5.8.0 General Availability
Released 2017-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 5.8 (RHEL v.6) ace-editor-1.1.3-3.el6sat, antlr-2.7.7-7.ep5.el6, apache-commons-beanutils-1.8.3-10.redhat_2.ep6.el6 +47
- Red Hat Satellite 5.8 ELS (RHEL v.6) ace-editor-1.1.3-3.el6sat, antlr-2.7.7-7.ep5.el6, apache-commons-beanutils-1.8.3-10.redhat_2.ep6.el6 +47
- Red Hat Satellite Managed DB 5.8 (RHEL v.6) perl-Filesys-Df-0.92-8.el6sat, perl-Params-Validate-0.92-3.el6, rh-postgresql95-2.2-3.el6 +12
- Red Hat Satellite Managed DB 5.8 ELS (RHEL v.6) perl-Filesys-Df-0.92-8.el6sat, perl-Params-Validate-0.92-3.el6, rh-postgresql95-2.2-3.el6 +12