CVE-2012-6149

Related Files

Red Hat Security Advisory 2014-0148-01

Posted Feb 10, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-0148-01 - Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. A cross-site scripting flaw was found in the way the Red Hat Satellite web interface performed sanitization of notes for registered systems. A remote authenticated Red Hat Satellite user could create a malicious note that, when viewed by a victim, could execute arbitrary web script with the privileges of the user viewing that note. Multiple cross-site scripting flaws were found in the Red Hat Satellite web interface. A remote attacker could provide a specially crafted link that, when visited by an authenticated Red Hat Satellite user, would lead to arbitrary web script execution in the context of the user's web interface session.

tags | advisory, remote, web, arbitrary, xss

systems | linux, redhat

advisories | CVE-2012-6149, CVE-2013-1869, CVE-2013-1871, CVE-2013-4415

SHA-256 | abe07ba4ba9dde3cf539102b9d388b950c61ff87c6feb5a80ba002ac5fdb7438

Download | Favorite | View