A stored cross-site scripting (XSS) flaw was found in the way input was escaped in the "Device Identifier" field when creating a new host in the Satellite web UI.
Name: Sanket Jagtap (Red Hat)
This issue was addressed in:
*** Bug 1421803 has been marked as a duplicate of this bug. ***