PT-2016-5361 · Red Hat · Red Hat Satellite

Adam Mariš · Published 2016-08-05 · Updated 2023-02-12 · CVE-2016-3080

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Satellite version 5.7

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the RHNMD User or Filesystem parameters, related to the display of monitoring probes.

Recommendations For Red Hat Satellite version 5.7, update to a version that includes the fix for this issue to prevent exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-3080

RHSA-2016:1484

Affected Products

Red Hat Satellite

References · 4

• https://bugzilla.redhat.com/show_bug.cgi?id=1320942 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3080 · Security Note
• http://rhn.redhat.com/errata/RHSA-2016-1484.html · Vendor Advisory