This service will be undergoing maintenance at 00:00 UTC, 2016-08-01. It is expected to last about 1 hours
Bug 713478 - (CVE-2011-2919) CVE-2011-2919 RHN Satellite / Spacewalk: XSS on SystemGroupList.do page
CVE-2011-2919 RHN Satellite / Spacewalk: XSS on SystemGroupList.do page
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
public=20110915,reported=20110522,sou...
: Security
Depends On: 730925 738818
Blocks: 622406 713496
  Show dependency treegraph
 
Reported: 2011-06-15 10:09 EDT by Jan Lieskovsky
Modified: 2016-03-04 07:34 EST (History)
12 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2011-09-16 02:48:35 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Jan Lieskovsky 2011-06-15 10:09:55 EDT
It was found that application for listing of system groups in Red Hat Network
Satellite Server and Spacewalk services did not properly HTML escape
the content of QueryString. A remote attacker could use this flaw to conduct
XSS attacks, potentially leading into attacker's ability to steal
the users' session cookie.

Acknowledgements:

Red Hat would like to thank Daniel Karanja Muturi for reporting this issue.
Comment 11 errata-xmlrpc 2011-09-15 13:55:26 EDT
This issue has been addressed in following products:

  Red Hat Network Satellite Server v 5.4

Via RHSA-2011:1299 https://rhn.redhat.com/errata/RHSA-2011-1299.html
Comment 12 Vincent Danen 2011-09-15 17:24:09 EDT
Created spacewalk-backend tracking bugs for this issue

Affects: fedora-all [bug 738818]
Comment 13 Jan Pazdziora 2011-09-16 02:41:50 EDT
(In reply to comment #12)
> Created spacewalk-backend tracking bugs for this issue
> 
> Affects: fedora-all [bug 738818]

I don't quite understand -- the problem (and the fix) is not in spacewalk-backend package.
Comment 14 Jan Pazdziora 2011-09-16 05:32:20 EDT
Fixed in Spacewalk master, commit 2d9c34e7b682b375ea32595f0dd38b61f424a24f, tagged as spacewalk-java-1.6.46-1.
Comment 15 Vincent Danen 2011-09-16 13:40:13 EDT
Sorry, thanks for the Jan.  When initially filing this, I suspect some random spacewalk component was selected for the purpose of tracking bugs.  Thank you for clearing it up and resolving that invalid tracker.

Note You need to log in before you can comment on or make changes to this bug.