Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SUSE Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
SUSE Manager basiert auf Spacewalk, welche die Codebase vom Red Hat
Satellite Server nutzt und ermöglicht ein zentrale Systemmanagement von Linux-Umgebungen.
Vulnerabilities 2
-
Low 3.5
Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web
A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This i…
-
Low 3.5
Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web
A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials sub page. This issue affects Container suse/manager/5.0/x86…
Revision history
-
#1
Initiale Fassung
References
-
SUSE Security Advisories vom 2024-11-18
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019837.html
-
SUSE Security Advisories vom 2024-11-18
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019836.html
-
SUSE Security Advisories vom 2024-11-18
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019835.html