CVEvulnerability
CVE-2011-4346
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
Affected configurations
• redhat satellite 5.4.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/47162 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-1794.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/50963 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1026391 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
- http://secunia.com/advisories/47162 Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-1794.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/50963 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1026391 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking