PT-2017-7998 · Red Hat · Red Hat Satellite

Adam Willard

·

Publicado

2016-05-19

·

Atualizado

2023-02-12

·

CVE-2016-2104

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Red Hat Satellite 5 (affected versions not specified)
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected API endpoints and parameters include: (1) the label parameter to "/admin/BunchDetail.do" (2) the package name, (3) search subscribed channels, or (4) channel filter parameter to "/software/packages/NameOverview.do". Additionally, there are unspecified vectors related to <input:hidden> or <bean:message> tags.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-2104
RHSA-2016:0590
SUSE-SU-2016:1367-1

Produtos afetados

Red Hat Satellite