CVE-2016-3097

Related Files

Red Hat Security Advisory 2016-1484-01

Posted Jul 26, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-1484-01 - Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and the remote management of multiple Linux deployments with a single, centralized tool. Security Fix: A stored cross-site scripting flaw was found in the way spacewalk-java displayed monitoring probes. An attacker can embed HTML and Javascript in the values for RHNMD User or Filesystem parameters in Satellite, allowing them to inject malicious content into the web page that is then displayed with that probe data.

tags | advisory, remote, web, javascript, xss

systems | linux, redhat

advisories | CVE-2016-3080, CVE-2016-3097

SHA-256 | fca385e1adee4c3355af668685e712abb94dffc828ffdb015bcc0eb5969e0c41

Download | Favorite | View