CVE-2014-0029: XSS
Hui Wang and Keqin Hong of Red Hat report:
SAM web application is vulnerable to cross site scripting. An attacker can use XSS to send the malicious script that will be executed to an unsuspecting user.
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0029?
CVE-2014-0029 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2014-0029?
To fix CVE-2014-0029, update the SAM web application to the latest version provided by Red Hat that addresses the XSS vulnerabilities.
What types of applications are affected by CVE-2014-0029?
CVE-2014-0029 specifically affects the SAM web application version 1.0.0 in the Red Hat Subscription Asset Manager.
What can attackers do with CVE-2014-0029?
Attackers can exploit CVE-2014-0029 to execute malicious scripts in the context of an unsuspecting user's session, leading to data theft or unauthorized actions.
When was CVE-2014-0029 reported?
CVE-2014-0029 was reported by Hui Wang and Keqin Hong of Red Hat in 2014.