CVE-2017-7514 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-7514 Interim 1 11 2023-02-13T02:05:01Z current 2021-05-30T13:54:46Z 2023-02-13T02:05:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-7514 A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-November/003387.html E-Mail link for SUSE-SU-2017:2964-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Manager Server 3.0 SUSE Manager Server 3.1 nutch-1.0-0.9.5.4 release-notes-susemanager-3.0.9-0.53.9.2 salt-netapi-client-0.13.0-16.6.4 spacecmd-2.5.5.9-16.9.4 spacewalk-backend-2.5.24.14-26.11.4 spacewalk-backend-app-2.5.24.14-26.11.4 spacewalk-backend-applet-2.5.24.14-26.11.4 spacewalk-backend-config-files-2.5.24.14-26.11.4 spacewalk-backend-config-files-common-2.5.24.14-26.11.4 spacewalk-backend-config-files-tool-2.5.24.14-26.11.4 spacewalk-backend-iss-2.5.24.14-26.11.4 spacewalk-backend-iss-export-2.5.24.14-26.11.4 spacewalk-backend-libs-2.5.24.14-26.11.4 spacewalk-backend-package-push-server-2.5.24.14-26.11.4 spacewalk-backend-server-2.5.24.14-26.11.4 spacewalk-backend-sql-2.5.24.14-26.11.4 spacewalk-backend-sql-oracle-2.5.24.14-26.11.4 spacewalk-backend-sql-postgresql-2.5.24.14-26.11.4 spacewalk-backend-tools-2.5.24.14-26.11.4 spacewalk-backend-xml-export-libs-2.5.24.14-26.11.4 spacewalk-backend-xmlrpc-2.5.24.14-26.11.4 spacewalk-base-2.5.7.19-25.9.4 spacewalk-base-minimal-2.5.7.19-25.9.4 spacewalk-base-minimal-config-2.5.7.19-25.9.4 spacewalk-branding-2.5.2.15-16.6.4 spacewalk-certs-tools-2.5.1.11-21.6.4 spacewalk-common-2.5.0.7-4.6.4 spacewalk-html-2.5.7.19-25.9.4 spacewalk-java spacewalk-java-2.5.59.18-27.9.4 spacewalk-java-config spacewalk-java-config-2.5.59.18-27.9.4 spacewalk-java-lib spacewalk-java-lib-2.5.59.18-27.9.4 spacewalk-java-oracle spacewalk-java-oracle-2.5.59.18-27.9.4 spacewalk-java-postgresql spacewalk-java-postgresql-2.5.59.18-27.9.4 spacewalk-oracle-2.5.0.7-4.6.4 spacewalk-postgresql-2.5.0.7-4.6.4 spacewalk-reports-2.5.1.3-4.3.4 spacewalk-taskomatic spacewalk-taskomatic-2.5.59.18-27.9.4 supportutils-plugin-susemanager-3.0.5-2.3.4 susemanager-3.0.24-25.6.4 susemanager-advanced-topics_en-pdf-3-25.8.2 susemanager-best-practices_en-pdf-3-25.8.2 susemanager-docs_en-3-25.8.2 susemanager-getting-started_en-pdf-3-25.8.2 susemanager-jsp_en-3-25.8.2 susemanager-reference_en-pdf-3-25.8.2 susemanager-schema-3.0.22-25.6.4 susemanager-sls-0.1.24-27.9.4 susemanager-tools-3.0.24-25.6.4 nutch-1.0-0.9.5.4 as a component of SUSE Manager Server 3.0 release-notes-susemanager-3.0.9-0.53.9.2 as a component of SUSE Manager Server 3.0 salt-netapi-client-0.13.0-16.6.4 as a component of SUSE Manager Server 3.0 spacecmd-2.5.5.9-16.9.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-app-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-applet-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-config-files-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-config-files-common-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-config-files-tool-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-iss-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-iss-export-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-libs-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-package-push-server-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-server-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-sql-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-sql-oracle-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-sql-postgresql-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-tools-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-xml-export-libs-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-backend-xmlrpc-2.5.24.14-26.11.4 as a component of SUSE Manager Server 3.0 spacewalk-base-2.5.7.19-25.9.4 as a component of SUSE Manager Server 3.0 spacewalk-base-minimal-2.5.7.19-25.9.4 as a component of SUSE Manager Server 3.0 spacewalk-base-minimal-config-2.5.7.19-25.9.4 as a component of SUSE Manager Server 3.0 spacewalk-branding-2.5.2.15-16.6.4 as a component of SUSE Manager Server 3.0 spacewalk-certs-tools-2.5.1.11-21.6.4 as a component of SUSE Manager Server 3.0 spacewalk-common-2.5.0.7-4.6.4 as a component of SUSE Manager Server 3.0 spacewalk-html-2.5.7.19-25.9.4 as a component of SUSE Manager Server 3.0 spacewalk-java-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 spacewalk-java-config-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 spacewalk-java-lib-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 spacewalk-java-oracle-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 spacewalk-java-postgresql-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 spacewalk-oracle-2.5.0.7-4.6.4 as a component of SUSE Manager Server 3.0 spacewalk-postgresql-2.5.0.7-4.6.4 as a component of SUSE Manager Server 3.0 spacewalk-reports-2.5.1.3-4.3.4 as a component of SUSE Manager Server 3.0 spacewalk-taskomatic-2.5.59.18-27.9.4 as a component of SUSE Manager Server 3.0 supportutils-plugin-susemanager-3.0.5-2.3.4 as a component of SUSE Manager Server 3.0 susemanager-3.0.24-25.6.4 as a component of SUSE Manager Server 3.0 susemanager-advanced-topics_en-pdf-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-best-practices_en-pdf-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-docs_en-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-getting-started_en-pdf-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-jsp_en-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-reference_en-pdf-3-25.8.2 as a component of SUSE Manager Server 3.0 susemanager-schema-3.0.22-25.6.4 as a component of SUSE Manager Server 3.0 susemanager-sls-0.1.24-27.9.4 as a component of SUSE Manager Server 3.0 susemanager-tools-3.0.24-25.6.4 as a component of SUSE Manager Server 3.0 spacewalk-java as a component of SUSE Manager Server 3.1 spacewalk-java-config as a component of SUSE Manager Server 3.1 spacewalk-java-lib as a component of SUSE Manager Server 3.1 spacewalk-java-oracle as a component of SUSE Manager Server 3.1 spacewalk-java-postgresql as a component of SUSE Manager Server 3.1 spacewalk-taskomatic as a component of SUSE Manager Server 3.1 A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users. CVE-2017-7514 SUSE Manager Server 3.0:nutch-1.0-0.9.5.4 SUSE Manager Server 3.0:release-notes-susemanager-3.0.9-0.53.9.2 SUSE Manager Server 3.0:salt-netapi-client-0.13.0-16.6.4 SUSE Manager Server 3.0:spacecmd-2.5.5.9-16.9.4 SUSE Manager Server 3.0:spacewalk-backend-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.14-26.11.4 SUSE Manager Server 3.0:spacewalk-base-2.5.7.19-25.9.4 SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.19-25.9.4 SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.19-25.9.4 SUSE Manager Server 3.0:spacewalk-branding-2.5.2.15-16.6.4 SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.11-21.6.4 SUSE Manager Server 3.0:spacewalk-common-2.5.0.7-4.6.4 SUSE Manager Server 3.0:spacewalk-html-2.5.7.19-25.9.4 SUSE Manager Server 3.0:spacewalk-java-2.5.59.18-27.9.4 SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.18-27.9.4 SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.18-27.9.4 SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.18-27.9.4 SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.18-27.9.4 SUSE Manager Server 3.0:spacewalk-oracle-2.5.0.7-4.6.4 SUSE Manager Server 3.0:spacewalk-postgresql-2.5.0.7-4.6.4 SUSE Manager Server 3.0:spacewalk-reports-2.5.1.3-4.3.4 SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.18-27.9.4 SUSE Manager Server 3.0:supportutils-plugin-susemanager-3.0.5-2.3.4 SUSE Manager Server 3.0:susemanager-3.0.24-25.6.4 SUSE Manager Server 3.0:susemanager-advanced-topics_en-pdf-3-25.8.2 SUSE Manager Server 3.0:susemanager-best-practices_en-pdf-3-25.8.2 SUSE Manager Server 3.0:susemanager-docs_en-3-25.8.2 SUSE Manager Server 3.0:susemanager-getting-started_en-pdf-3-25.8.2 SUSE Manager Server 3.0:susemanager-jsp_en-3-25.8.2 SUSE Manager Server 3.0:susemanager-reference_en-pdf-3-25.8.2 SUSE Manager Server 3.0:susemanager-schema-3.0.22-25.6.4 SUSE Manager Server 3.0:susemanager-sls-0.1.24-27.9.4 SUSE Manager Server 3.0:susemanager-tools-3.0.24-25.6.4 SUSE Manager Server 3.1:spacewalk-java SUSE Manager Server 3.1:spacewalk-java-config SUSE Manager Server 3.1:spacewalk-java-lib SUSE Manager Server 3.1:spacewalk-java-oracle SUSE Manager Server 3.1:spacewalk-java-postgresql SUSE Manager Server 3.1:spacewalk-taskomatic moderate 4 AV:N/AC:L/Au:S/C:N/I:P/A:N 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N