CVE-2016-2104

Related Files

Red Hat Security Advisory 2016-0590-01

Posted Apr 4, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-0590-01 - Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and the remote management of multiple Linux deployments with a single, centralized tool. Security Fix: A cross-site scripting flaw was found in how XML data was handled in Red Hat Satellite. A user able to use the XMLRPC API could exploit this flaw to perform XSS attacks against other Satellite users. Multiple cross-site scripting flaws were found in the way certain form data was handled in Red Hat Satellite. A user able to enter form data could use these flaws to perform XSS attacks against other Satellite users.

tags | advisory, remote, xss

systems | linux, redhat

advisories | CVE-2015-0284, CVE-2016-2103, CVE-2016-2104, CVE-2016-3079

SHA-256 | 42d4f4e3af74814cadcbc87364f9ffead3c998f92991979048ae4a84bcde1e1a

Download | Favorite | View