PT-2016-5368 · Red Hat · Red Hat Satellite
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Red Hat Satellite version 5.7
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a group name when viewing snapshot data.
Recommendations
For Red Hat Satellite version 5.7, update to a version that includes the fix for this issue to prevent remote attackers from injecting arbitrary web script or HTML.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Hat Satellite