Security Advisory catalog CVE-2011-3344
cve-program · CVE-2011-3344 Published
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2011-3344 Published spacewalk-config https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-config",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.2-7.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} spacewalk-java https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-java",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.39-98.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} spacewalk-web https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Network Satellite Server v 5.4",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "spacewalk-web",
"defaultStatus": "affected",
"versions": [
{
"version": "0:1.2.7-20.el5sat",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:network_satellite:5.4::el5",
"cpe:/a:redhat:network_satellite:5.4::el6"
]
} rhn-client-tools https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhn-client-tools",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} rhnsd https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhnsd",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} yum-rhn-plugin https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "yum-rhn-plugin",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:6"
]
} rhnsd https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhnsd",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
]
} yum-rhn-plugin https://access.redhat.com/downloads/content/package-browser/
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "yum-rhn-plugin",
"defaultStatus": "unknown",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
]
} Original source record · Cite this exact observation · Complete original publisher JSON