CVE-2011-1948

Related Files

Red Hat Security Advisory 2012-0151-03

Posted Feb 21, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-0151-03 - The conga packages provide a web-based administration tool for remote cluster and storage management. Multiple cross-site scripting flaws were found in luci, the conga web-based administration application. If a remote attacker could trick a user, who was logged into the luci interface, into visiting a specially-crafted URL, it would lead to arbitrary web script execution in the context of the user's luci session. These updated conga packages include several bug fixes and an enhancement.

tags | advisory, remote, web, arbitrary, xss

systems | linux, redhat

advisories | CVE-2010-1104, CVE-2011-1948

SHA-256 | df05872cd32bcf0eb301863b6de620c1fc089496e50141bb99995e7600af535a

Download | Favorite | View