PT-2018-2570 · Red Hat · Katello+1

Laura Pardo + 1 · Published 2018-09-11 · Updated 2022-05-14 · CVE-2018-16887

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Satellite katello versions prior to 3.9.0

Description A cross-site scripting (XSS) flaw was found in the katello component of Satellite, allowing an attacker with privileges to create or edit organizations and locations to execute XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. The vulnerability is related to insufficient protection of the web page structure.

Recommendations For versions prior to 3.9.0, update to version 3.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Subscriptions and Red Hat Repositories wizards to minimize the risk of exploitation. Avoid using the wizards until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2019-01044

CVE-2018-16887

GHSA-MHHC-R88H-2QRM

RHSA-2019:1222

Affected Products

Satellite

Katello

References · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2018-16887.yml · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16887 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-16887 · Security Note
• https://osv.dev/vulnerability/CVE-2018-16887 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mhhc-r88h-2qrm · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1222 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01044 · Security Note
• https://github.com/Katello/katello · Note
• https://mag-securs.com/alertes/artmid/1894/articleid/27160/satellite-up-to-390-katello-cross-site-request-forgery.aspx · Note