A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
CVE-2011-3344
CVSS base score
5.4 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-79
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
redhat network satellite
redhat spacewalk
References
- www.redhat.com Patch, Vendor Advisory
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com Vendor Advisory
- git.fedorahosted.org
- www.redhat.com Vendor Advisory
- www.redhat.com Patch, Vendor Advisory
- bugzilla.redhat.com Vendor Advisory
- git.fedorahosted.org
- www.redhat.com Vendor Advisory