medium4.3
CVE-2011-2919
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script o…
Impact
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Network Satellite | All versions |
| Redhat | Spacewalk | Version 1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.redhat.com/support/errata/RHSA-2011-1299.html
- https://bugzilla.redhat.com/show_bug.cgi?id=713478
- https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
- http://www.redhat.com/support/errata/RHSA-2011-1299.html
- https://bugzilla.redhat.com/show_bug.cgi?id=713478
- https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html