Bug 826646 (CVE-2012-2662)

Summary:	CVE-2012-2662 Certificate System: multiple XSS flaws
Product:	[Other] Security Response	Reporter:	Tomas Hoger <thoger>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	alee, awnuk, cfu, edewata, gsterlin, mharmsen, mprpic, nkinder, security-response-team
Target Milestone:	---	Keywords:	Reopened, Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Multiple cross-site scripting flaws were discovered in the Red Hat Certificate System Agent and End Entity pages. An attacker could use these flaws to perform a cross-site scripting (XSS) attack against victims using the Certificate System's web interface.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-06-10 10:58:43 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	814478, 1220423, 1221900, 1225670
Bug Blocks:	822807, 1193283, 1221513

Description Tomas Hoger 2012-05-30 16:58:29 UTC

Multiple cross-site scripting issues were discovered in the Red Hat Certificate System's / Dogtag Certificate System's Agent and End Entity pages.  An attacker could use these flaw to perform a cross-site scripting (XSS) attack against victims viewing Certificate System's web interface.

The issue was originally reported via bug #814478.

Following fixes were applied to address these issues:
https://fedorahosted.org/pki/changeset/2411
https://fedorahosted.org/pki/changeset/2414
https://fedorahosted.org/pki/changeset/2417
https://fedorahosted.org/pki/changeset/2426

Comment 2 errata-xmlrpc 2012-07-19 15:53:55 UTC

This issue has been addressed in following products:

  Red Hat Certificate System 8

Via RHSA-2012:1103 https://rhn.redhat.com/errata/RHSA-2012-1103.html

Comment 3 Martin Prpič 2015-05-15 08:32:07 UTC

*** Bug 1221502 has been marked as a duplicate of this bug. ***

Comment 5 errata-xmlrpc 2015-07-22 06:55:23 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2015:1347 https://rhn.redhat.com/errata/RHSA-2015-1347.html