Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of …
Medium CVSS 4.6
Summary
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- http://secunia.com/advisories/47162 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-1794.html Patch
- http://www.securityfocus.com/bid/50963 Third Party Advisory
- http://www.securitytracker.com/id?1026391 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2011:1794
- https://access.redhat.com/security/cve/CVE-2011-4346
- https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
- http://secunia.com/advisories/47162 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-1794.html Patch
- http://www.securityfocus.com/bid/50963 Third Party Advisory
- http://www.securitytracker.com/id?1026391 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
Timeline
- nvd_ingest NVD