Security Advisory catalog CVE-2011-2920
cve-program · CVE-2011-2920 Published
A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2011-2920 Published spacewalk-config https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-config",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.2-7.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} spacewalk-java https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-java",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.39-98.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} spacewalk-web https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-web",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.7-20.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} rhn-client-tools https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhn-client-tools",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} rhnsd https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhnsd",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} yum-rhn-plugin https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "yum-rhn-plugin",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} rhnsd https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhnsd",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
]
} yum-rhn-plugin https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "yum-rhn-plugin",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
]
} Original source record · Cite this exact observation · Complete original publisher JSON