Description
It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Mobile Application Platform 4 | fh-system-dump-tool | 1.0.0-5.el7 | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | fping | 3.10-4.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | nagios +2 | 4.0.8-8.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | nagios-plugins +55 | 2.0.3-3.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | perl-Crypt-CBC | 2.33-2.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | perl-Crypt-DES | 2.05-20.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | perl-Net-SNMP | 6.0.1-7.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | phantomjs | 1.9.7-3.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | python-meld3 | 0.6.10-1.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | qstat | 2.11-13.20080912svn311.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | radiusclient-ng +2 | 0.5.6-9.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | redis | 2.8.21-2.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | rhmap-fh-openshift-templates | 4.5.0-11.el7 | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | rhmap-mod_authnz_external | 3.3.1-7.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | sendEmail | 1.56-2.el7 | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | ssmtp | 2.64-14.el7map | RHSA-2017:2674 |
| Red Hat Mobile Application Platform 4 | supervisor | 3.1.3-3.el7map | RHSA-2017:2674 |
Advisories 1
- RHSA-2017:2674 Red Hat Security Advisory: Red Hat Mobile Application Platform security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
References
- RHSA-2017:2674 vendor-advisory
- RHSA-2017:2675 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1478770