PT-2016-5361 · Red Hat · Red Hat Satellite

Adam Mariš

·

CVE-2016-3080

·

Published

2016-08-05

·

Updated

2023-02-12

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Red Hat Satellite version 5.7
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the RHNMD User or Filesystem parameters, related to the display of monitoring probes.
Recommendations For Red Hat Satellite version 5.7, update to a version that includes the fix for this issue to prevent exploitation.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-3080
RHSA-2016:1484

Affected Products

Red Hat Satellite