CVE-2011-4346

CVSS V2 Low 3.5 CVSS V3 None
Description
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page.
Overview
  • CVE ID
  • CVE-2011-4346
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2011-12-10T17:55:01
  • Last Modified Date
  • 2023-02-13T01:21:47
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:redhat:satellite:5.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:* 0 OR
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:S/C:N/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 3.5
  • Severity
  • LOW
  • Exploitability Score
  • 6.8
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.redhat.com/support/errata/RHSA-2011-1794.html Patch Vendor Advisory
http://www.securityfocus.com/bid/50963 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026391 Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2011:1794
https://access.redhat.com/security/cve/CVE-2011-4346
https://bugzilla.redhat.com/show_bug.cgi?id=742050 Issue Tracking
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2011-4346
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4346
History
Created Old Value New Value Data Type Notes
2022-05-10 06:34:19 Added to TrackCVE
2023-02-02 17:03:30 2023-02-02T15:15:27 CVE Modified Date updated
2023-02-02 17:03:30 Analyzed Modified Vulnerability Status updated
2023-02-02 17:03:30 Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page. CVE-2011-4346 satellite: XSS flaw in custom system information key handling Description updated
2023-02-02 17:03:31 References updated
2023-02-13 03:04:12 2023-02-13T01:21:47 CVE Modified Date updated
2023-02-13 03:04:12 CVE-2011-4346 satellite: XSS flaw in custom system information key handling Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page. Description updated