REDHAT-BUG-681032: Medium severity red hat satellite with embedded oracle vulnerability

Published Feb 28, 2011

Updated

Nils Juenemann reported that there is a cross-site scripting flaw in the filter for a result set in nearly every filter form provided by Red Hat Satellite (for example the "Filter by Synopsis" field).

Acknowledgements:

Red Hat would like to thank Nils Juenemann and The Bearded Warriors for independently reporting this issue.

Affected Software

1 affected component

Red Hat Satellite

Event History

Feb 28, 2011

Data Sourced

via Red Hat·09:37 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-681032?

REDHAT-BUG-681032 is classified as a medium severity cross-site scripting vulnerability.

How do I fix REDHAT-BUG-681032?

To fix REDHAT-BUG-681032, update to the latest version of Red Hat Satellite that addresses this vulnerability.

What kind of vulnerability is REDHAT-BUG-681032?

REDHAT-BUG-681032 is a cross-site scripting flaw affecting various filter forms in Red Hat Satellite.

Where does REDHAT-BUG-681032 occur?

REDHAT-BUG-681032 occurs in nearly every filter form provided by Red Hat Satellite, such as the 'Filter by Synopsis' field.

Who reported the REDHAT-BUG-681032 vulnerability?

The vulnerability REDHAT-BUG-681032 was reported by Nils Juenemann.