CVE-2016-6320
Fixed in a distro release EPSS <1%
Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form.
Products: theforeman foreman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat satellite 6.1 | foreman | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-compute | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-debug | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-ec2 | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-gce | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-installer-katello | 0:3.0.0.57-1.el6sat |
| Red Hat satellite 6.1 | foreman-libvirt | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-openstack | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-ovirt | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-postgresql | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-proxy | 0:1.11.0.6-1.el6sat |
| Red Hat satellite 6.1 | foreman-rackspace | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | foreman-vmware | 0:1.11.0.53-1.el6sat |
| Red Hat satellite 6.1 | katello | 0:3.0.0-12.el6sat |
| Red Hat satellite 6.1 | katello-capsule | 0:3.0.0-12.el6sat |
| Red Hat satellite 6.1 | katello-common | 0:3.0.0-12.el6sat |
| Red Hat satellite 6.1 | katello-debug | 0:3.0.0-12.el6sat |
| Red Hat satellite 6.1 | katello-installer-base | 0:3.0.0.57-1.el6sat |
| Red Hat satellite 6.1 | katello-service | 0:3.0.0-12.el6sat |
| Red Hat satellite 6.1 | python-qpid | 0:0.30-10.el6sat |
| Red Hat satellite 6.1 | satellite | 0:6.2.2-1.1.el6sat |
| Red Hat satellite 6.1 | satellite-capsule | 0:6.2.2-1.1.el6sat |
| Red Hat satellite 6.1 | satellite-cli | 0:6.2.2-1.1.el6sat |
| Red Hat satellite 6.1 | satellite-debug-tools | 0:6.2.2-1.1.el6sat |
| Red Hat satellite 6.1 | satellite-installer | 0:6.2.0.12-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-bastion | 0:3.2.0.10-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman-redhat_access | 0:1.0.13-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman_openscap | 0:0.5.3.18-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman_remote_execution | 0:0.3.0.12-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-foreman_theme_satellite | 0:0.1.28-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-hammer_cli_csv | 0:2.1.0-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-hammer_cli_katello | 0:0.0.22.26-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-katello | 0:3.0.0.78-1.el6sat |
| Red Hat satellite 6.1 | tfm-rubygem-redhat_access_lib | 0:1.0.4-1.el6sat |
| Red Hat satellite 6.2 | foreman | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-compute | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-debug | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-ec2 | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-gce | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-installer-katello | 0:3.0.0.57-1.el7sat |
| Red Hat satellite 6.2 | foreman-libvirt | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-openstack | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-ovirt | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-postgresql | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-proxy | 0:1.11.0.6-1.el7sat |
| Red Hat satellite 6.2 | foreman-rackspace | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | foreman-vmware | 0:1.11.0.53-1.el7sat |
| Red Hat satellite 6.2 | katello | 0:3.0.0-12.el7sat |
| Red Hat satellite 6.2 | katello-capsule | 0:3.0.0-12.el7sat |
| Red Hat satellite 6.2 | katello-common | 0:3.0.0-12.el7sat |
| Red Hat satellite 6.2 | katello-debug | 0:3.0.0-12.el7sat |
| Red Hat satellite 6.2 | katello-installer-base | 0:3.0.0.57-1.el7sat |
| Red Hat satellite 6.2 | katello-service | 0:3.0.0-12.el7sat |
| Red Hat satellite 6.2 | satellite | 0:6.2.2-1.1.el7sat |
| Red Hat satellite 6.2 | satellite-capsule | 0:6.2.2-1.1.el7sat |
| Red Hat satellite 6.2 | satellite-cli | 0:6.2.2-1.1.el7sat |
| Red Hat satellite 6.2 | satellite-debug-tools | 0:6.2.2-1.1.el7sat |
| Red Hat satellite 6.2 | satellite-installer | 0:6.2.0.12-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-bastion | 0:3.2.0.10-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman-redhat_access | 0:1.0.13-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman_openscap | 0:0.5.3.18-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman_remote_execution | 0:0.3.0.12-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-foreman_theme_satellite | 0:0.1.28-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-hammer_cli_csv | 0:2.1.0-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-hammer_cli_katello | 0:0.0.22.26-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello | 0:3.0.0.78-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-katello_ostree | 0:3.0.0.78-1.el7sat |
| Red Hat satellite 6.2 | tfm-rubygem-redhat_access_lib | 0:1.0.4-1.el7sat |
| Red Hat satellite capsule 6.1 | foreman | 0:1.11.0.53-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-debug | 0:1.11.0.53-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-installer-katello | 0:3.0.0.57-1.el6sat |
| Red Hat satellite capsule 6.1 | foreman-proxy | 0:1.11.0.6-1.el6sat |
| Red Hat satellite capsule 6.1 | katello | 0:3.0.0-12.el6sat |
| Red Hat satellite capsule 6.1 | katello-capsule | 0:3.0.0-12.el6sat |
| Red Hat satellite capsule 6.1 | katello-debug | 0:3.0.0-12.el6sat |
| Red Hat satellite capsule 6.1 | katello-installer-base | 0:3.0.0.57-1.el6sat |
| Red Hat satellite capsule 6.1 | katello-service | 0:3.0.0-12.el6sat |
| Red Hat satellite capsule 6.1 | python-qpid | 0:0.30-10.el6sat |
| Red Hat satellite capsule 6.1 | satellite | 0:6.2.2-1.1.el6sat |
| Red Hat satellite capsule 6.1 | satellite-capsule | 0:6.2.2-1.1.el6sat |
| Red Hat satellite capsule 6.1 | satellite-debug-tools | 0:6.2.2-1.1.el6sat |
| Red Hat satellite capsule 6.1 | satellite-installer | 0:6.2.0.12-1.el6sat |
| Red Hat satellite capsule 6.2 | foreman | 0:1.11.0.53-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-debug | 0:1.11.0.53-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-installer-katello | 0:3.0.0.57-1.el7sat |
| Red Hat satellite capsule 6.2 | foreman-proxy | 0:1.11.0.6-1.el7sat |
| Red Hat satellite capsule 6.2 | katello | 0:3.0.0-12.el7sat |
| Red Hat satellite capsule 6.2 | katello-capsule | 0:3.0.0-12.el7sat |
| Red Hat satellite capsule 6.2 | katello-debug | 0:3.0.0-12.el7sat |
| Red Hat satellite capsule 6.2 | katello-installer-base | 0:3.0.0.57-1.el7sat |
| Red Hat satellite capsule 6.2 | katello-service | 0:3.0.0-12.el7sat |
| Red Hat satellite capsule 6.2 | satellite | 0:6.2.2-1.1.el7sat |
| Red Hat satellite capsule 6.2 | satellite-capsule | 0:6.2.2-1.1.el7sat |
| Red Hat satellite capsule 6.2 | satellite-debug-tools | 0:6.2.2-1.1.el7sat |
| Red Hat satellite capsule 6.2 | satellite-installer | 0:6.2.0.12-1.el7sat |