CVE-2011-2919
Fixed in a distro release EPSS 1%
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
Products: redhat network_satellite, redhat spacewalk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.4 | spacewalk-base | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-base | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-base-minimal | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-base-minimal | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-config | 0:1.2.2-7.el5sat |
| Red Hat network satellite 5.4 | spacewalk-config | 0:1.2.2-7.el6sat |
| Red Hat network satellite 5.4 | spacewalk-dobby | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-dobby | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-grail | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-grail | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-html | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-html | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java | 0:1.2.39-98.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java | 0:1.2.39-98.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java-config | 0:1.2.39-98.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java-config | 0:1.2.39-98.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-lib | 0:1.2.39-98.el5sat |
| Red Hat network satellite 5.4 | spacewalk-java-lib | 0:1.2.39-98.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-oracle | 0:1.2.39-98.el6sat |
| Red Hat network satellite 5.4 | spacewalk-java-oracle | 0:1.2.39-98.el5sat |
| Red Hat network satellite 5.4 | spacewalk-pxt | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-pxt | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-sniglets | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-sniglets | 0:1.2.7-20.el6sat |
| Red Hat network satellite 5.4 | spacewalk-taskomatic | 0:1.2.39-98.el5sat |
| Red Hat network satellite 5.4 | spacewalk-taskomatic | 0:1.2.39-98.el6sat |
| Red Hat network satellite 5.4 | spacewalk-web | 0:1.2.7-20.el5sat |
| Red Hat network satellite 5.4 | spacewalk-web | 0:1.2.7-20.el6sat |