Lucene search

K
mageiaGentoo FoundationMGASA-2013-0361
HistoryDec 01, 2013 - 1:40 a.m.

Updated ganglia-web package fixes security vulnerability

2013-12-0101:40:35
Gentoo Foundation
advisories.mageia.org
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%

XSS issue in ganglia-web makes it possible to execute JavaScript in victims’ browser after tricking the victim into opening a specially crafted URL (CVE-2013-6395).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchganglia-web< 3.5.4-2.1ganglia-web-3.5.4-2.1.mga3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%