Skip to content
OpenAdvisories
Medium · 4.3 CVE-2017-7514 EUVD-2017-16531GHSA-cqmg-98pc-948m

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user a…

Published Jul 30, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: Red Hat Product: Red Hat Satellite

Description

A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Satellite 5.8.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Network Satellite Managed Db 5 perl-Filesys-Df 0.92-8.el6sat RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 perl-Params-Validate 0.92-3.el6 RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 rh-postgresql95 +1 2.2-3.el6 RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 rh-postgresql95-postgresql +4 9.5.4-2.el6 RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 satellite-repo 5.8.0.2-2.el6sat RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 spacewalk-postgresql-server 9.5-1.el6sat RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 spacewalk-setup-postgresql 2.5.0-27.el6sat RHSA-2017:1558
Red Hat Network Satellite Managed Db 5 spacewalk-web +2 2.5.2-11.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 ace-editor 1.1.3-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 antlr 2.7.7-7.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 apache-commons-beanutils 1.8.3-10.redhat_2.ep6.el6 RHSA-2017:1558
Red Hat Network Satellite 5 apache-commons-cli 1.2-7.5.redhat_2.ep6.el6.4 RHSA-2017:1558
Red Hat Network Satellite 5 bootstrap 3.0.0-4.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 bootstrap-datepicker 1.3.0-2.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 c3p0 0.9.1.2-2.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 cdn-sync-mappings 2.2-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 cglib 2.2-5.6.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 cobbler 2.0.7-66.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 cobbler-loaders 1.0.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 concurrent 1.3.4-10.1.5_jboss_update1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 cx_Oracle 5.1.2-6.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 dojo 1.6.1-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 dom4j 1.6.1-11.1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 dwr 3.0rc2-7.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 font-awesome 4.0.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 glassfish-jsf 1.2_13-3.1.4.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 hibernate3 1:3.3.2-1.3.GA_CP04.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jabberd 2.2.8-23.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 jabberpy 0.5-0.22.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-chain 1.2-2.2.2.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-codec 1.3-11.7.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-digester 1.8.1-8.1.1.1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-el 1.0-19.2.1.1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-fileupload 1:1.1.1-7.4.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-io 1.4-4.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-lang 2.4-1.1.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-logging 1.1.1-1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-logging-jboss 1.1-10.3_patch_02.1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-parent 11-2.1.2.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-commons-validator 1.3.1-7.5.2.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-oro 2.0.8-6.6.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jakarta-taglibs-standard 1.1.1-12.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 java-1.8.0-ibm +1 1:1.8.0.4.1-1jpp.1.el6_8 RHSA-2017:1558
Red Hat Network Satellite 5 javassist 3.12.0-6.SP1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jboss-javaee +2 5.0.1-2.9.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jcommon 1.0.16-1.2.2.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jdom 1.1.1-1.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jfreechart 1.0.13-2.3.2.1.1.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 jpam 0.4-28.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 jquery-timepicker 1.3.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 jquery-ui 1.10.4.custom-2.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 libgsasl 1.4.0-5.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 libntlm 1.0-4.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 momentjs 2.6.0-2.2.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 nutch 1.0-0.16.20081201040121nightly.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 objectweb-asm 3.2-2.1.el6 RHSA-2017:1558
Red Hat Network Satellite 5 oracle-config 1.1-7.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 oracle-instantclient +2 10.2.0-47.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 oracle-instantclient-selinux +1 10.2.0.19-6.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 oracle-selinux +1 0.1.23.36-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 osad +3 5.11.63-11.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 oscache 2.2-3.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 patternfly1 1.0.5-10.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 perl-Class-Singleton 1.4-6.el6 RHSA-2017:1558
Red Hat Network Satellite 5 perl-DBD-Oracle 1.62-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 perl-DateTime 1:0.5300-1.el6 RHSA-2017:1558
Red Hat Network Satellite 5 perl-Filesys-Df 0.92-8.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 perl-Frontier-RPC-Client 0.07b4p1-10.el6 RHSA-2017:1558
Red Hat Network Satellite 5 perl-List-MoreUtils 0.22-10.el6 RHSA-2017:1558
Red Hat Network Satellite 5 perl-Mail-RFC822-Address 0.3-12.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 perl-Params-Validate 0.92-3.el6 RHSA-2017:1558
Red Hat Network Satellite 5 perl-Satcon +1 2.5.0-2.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 perl-Term-Completion 1.00-9.el6sat.2 RHSA-2017:1558
Red Hat Network Satellite 5 perl-TermReadKey 2.30-13.el6 RHSA-2017:1558
Red Hat Network Satellite 5 pwstrength-bootstrap 1.0.2-4.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 pyliblzma 0.5.3-14.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 python-debian 0.1.16-5.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 python-gzipstream 2.3.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 quartz +1 1.8.4-6.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 redhat-access-plugin-sat5 2.1.0-56.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 redstone-xmlrpc 1.1_20071120-16.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 rh-postgresql95 +1 2.2-3.el6 RHSA-2017:1558
Red Hat Network Satellite 5 rh-postgresql95-postgresql +4 9.5.4-2.el6 RHSA-2017:1558
Red Hat Network Satellite 5 rhn-i18n-guides 5.8.0.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 rhn-i18n-release-notes 5.8.0.2-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 rhnpush 5.5.89-20.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 roboto 1.3-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 satellite-branding 5.8.0.8-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 satellite-doc-indexes 5.8.0-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 satellite-repo 5.8.0.2-2.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 satellite-schema 5.8.0.31-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 select2 3.4.5-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 select2-bootstrap-css 1.3.0-5.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 simple-core 3.1.3-7.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 sitemesh 2.4.2-2.ep6.el6 RHSA-2017:1558
Red Hat Network Satellite 5 spacecmd 2.5.0-14.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk +3 2.5.0-10.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-admin 2.5.0-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-backend +17 2.5.3-143.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-config 2.6.0-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-java +5 2.5.14-89.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-postgresql-server 9.5-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-reports 2.5.0-6.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-schema 2.5.1-49.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-search 2.5.1-4.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-selinux +1 2.3.2-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-setup 2.5.1-22.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-setup-postgresql 2.5.0-27.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-slf4j 1.6.1-6.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-ssl-cert-check 1:2.4-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-usix 2.7.1-3.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-utils 2.5.1-23.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 spacewalk-web +5 2.5.2-11.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 stringtree-json 2.0.9-10.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 struts +3 1.3.10-6.ep5.el6 RHSA-2017:1558
Red Hat Network Satellite 5 tanukiwrapper 3.2.3-15.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 udns 0.1-1.el6sat RHSA-2017:1558
Red Hat Network Satellite 5 xalan-j2 2.7.0-9.8.el6 RHSA-2017:1558

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server 3.0 nutch 1.0-0.9.5.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 release-notes-susemanager 3.0.9-0.53.9.2 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 salt-netapi-client 0.13.0-16.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacecmd 2.5.5.9-16.9.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk 2.5.0.7-4.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-backend 2.5.24.14-26.11.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-branding 2.5.2.15-16.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-certs-tools 2.5.1.11-21.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-java 2.5.59.18-27.9.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-reports 2.5.1.3-4.3.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 spacewalk-web 2.5.7.19-25.9.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 supportutils-plugin-susemanager 3.0.5-2.3.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 susemanager 3.0.24-25.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 susemanager-docs_en 3-25.8.2 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 susemanager-schema 3.0.22-25.6.4 SUSE-SU-2017:2964-1
SUSE Manager Server 3.0 susemanager-sls 0.1.24-27.9.4 SUSE-SU-2017:2964-1

Advisories 2

References