CVE-2016-3113: XSS
First published: Wed Apr 13 2016(Updated: )
An XSS vulnerability was found in ovirt-engine when submitting configuration file used to build up the VNC/SPICE-Connection. The file is automatically generated without any user input on the client side and uploaded to the server, which immediately reflects that upload. Legitimate HTTP Request looks aas following: POST /ovirt-engine/services/attachment/console.vv contenttype=application%2Fx-virt-viewer%3B+charset%3DUTF-8&content=[...configuration file...]&encodingtype=plain Web application accepts the POST-Parameter contenttype, that sets the Content-Type of the HTTP-Response of the reflected upload. When setting the contenttype to text/html, it allows to inject malicious JavaScript code to be reflected on the page. The attacker could send RPC-Requests via XHR with the privileges of the victim. If the victim is logged in, the attacker can inject a JavaScript code that sends a RPC-Request to start, stop or manipulate a specific VM.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| oVirt |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-3113?
CVE-2016-3113 is considered a moderate severity vulnerability due to its potential for XSS attacks.
How can I fix CVE-2016-3113?
To fix CVE-2016-3113, update to the latest version of Red Hat oVirt Engine where the vulnerability is patched.
What type of vulnerability is CVE-2016-3113?
CVE-2016-3113 is an XSS (Cross-Site Scripting) vulnerability affecting oVirt Engine.
What systems are affected by CVE-2016-3113?
CVE-2016-3113 affects versions of Red Hat oVirt Engine.
Are there exploit scenarios for CVE-2016-3113?
Exploiting CVE-2016-3113 could allow attackers to execute arbitrary scripts in the context of the user's browser.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-3113
- agent/weakness
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/ovirt