CVE-2017-7514

SAT 5 XSS in the Failed Systems page

Published Jul 30, 2018 CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-16531 A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 4:04 PM
Reserved
Apr 5, 2017, 12:00 AM
Status
Modified
Published
Jul 30, 2018, 3:29 PM
Modified
Jun 17, 2026, 1:24 AM
Severity
Moderate
Public date
Jun 21, 2017, 12:00 AM