CVE-2014-3654

Related Files

Red Hat Security Advisory 2014-1762-01

Posted Oct 30, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-1762-01 - Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. The spacewalk-java packages contain the code for the Java version of the Spacewalk Web site. Stored and reflected cross-site scripting flaws were found in the way spacewalk-java displayed certain information. By sending a specially crafted request to Satellite, a remote, authenticated attacker could embed HTML content into the stored data, allowing them to inject malicious content into the web page that is used to view that data.

tags | advisory, java, remote, web, xss

systems | linux, redhat

advisories | CVE-2014-3654

SHA-256 | 02a101d80c33b14f3940a3a404d2336555f32306ccd6090ed51d43d57b679580

Download | Favorite | View