CVE-2011-3344 Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
Remote attackers can inject scripts into the Spacewalk login form, potentially stealing user data or hijacking sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-3344?
CVE-2011-3344 is a medium-severity cross-site scripting vulnerability in Red Hat Enterprise Linux 6, published on 5 Feb 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
Weakness: CWE-79
Which versions are affected by CVE-2011-3344?
It affects 2 products.
Products include Redhat Network Satellite, Redhat Spacewalk.
How do I fix CVE-2011-3344?
Apply the vendor's patch.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2011-3344 being exploited?
There is no known exploitation of CVE-2011-3344 in the wild and no public exploit code.
Other vulnerabilities in Red Hat Enterprise Linux 6
- CVE-2014-8162 XML external entity in n/a
- CVE-2013-4480 Missing authorization in n/a
- CVE-2013-2143 Missing authorization in n/a
- CVE-2011-1594 Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
- CVE-2011-2920 Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
Sources
Also known as GHSA-fvhw-hg3x-xxxp.