CVE-2011-2919: XSS
First published: Wed Jun 15 2011(Updated: )
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Spacewalk | =1.6 | |
| Red Hat Satellite |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=713478
- http://www.redhat.com/support/errata/RHSA-2011-1299.html
- https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
- https://rhn.redhat.com/errata/RHSA-2011-1299.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=738818
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=713478#c12
Frequently Asked Questions
What is the severity of CVE-2011-2919?
CVE-2011-2919 is classified as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2011-2919?
To fix CVE-2011-2919, update to the fixed versions of Spacewalk or Red Hat Satellite provided by Red Hat.
What impact does CVE-2011-2919 have on affected systems?
CVE-2011-2919 allows remote attackers to inject malicious scripts that could lead to unauthorized actions or data theft.
Which software versions are affected by CVE-2011-2919?
CVE-2011-2919 affects Red Hat Spacewalk version 1.6 and Red Hat Network Satellite.
Can CVE-2011-2919 be exploited by unauthenticated users?
Yes, CVE-2011-2919 can be exploited by unauthenticated remote attackers via manipulated query strings.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-2919
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/remedy
- agent/description
- agent/event
- agent/trending
- agent/weakness
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/redhat
- canonical/red hat spacewalk
- version/red hat spacewalk/1.6
- canonical/red hat satellite