Lucene search

RedhatCVE-2011-4346

HistoryDec 10, 2011 - 5:55 p.m.

CVE-2011-4346

2011-12-1017:55:01

CWE-79

redhat

web.nvd.nist.gov

cve

2011

4346

cross-site scripting

xss

red hat network

rhn

satellite 5.4.1

vulnerability

web interface

remote

authenticated users

html

description field

asset tag

custom info page

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.

Affected configurations

Nvd

Node

redhatsatelliteMatch5.4.1

AND

redhatenterprise_linuxMatch5.0

redhatenterprise_linuxMatch6.0

VendorProductVersionCPE
redhatsatellite5.4.1cpe:2.3:a:redhat:satellite:5.4.1:*:*:*:*:*:*:*
redhatenterprise_linux5.0cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	satellite	5.4.1	cpe:2.3:a:redhat:satellite:5.4.1:::::::*
redhat	enterprise_linux	5.0	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
redhat	enterprise_linux	6.0	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*