Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Cross-site scripting (XSS) vulnerability in the Shares overview in Openstack Manila before 2.5.1 allows     remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the Create     Share form. (CVE-2016-6519)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows
    remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create
    Share" form. (CVE-2016-6519)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:2116 advisory.

    OpenStack's File Share Service (manila) provides the means to easily provision shared file systems that     can be consumed by multiple instances. These shared file systems are provisioned from pre-existing, back-     end volumes. The UI component provides the dashboard plugin for the service.

    Security Fix(es):

    * A cross-site scripting flaw was discovered in openstack-manila-ui's Metadata field contained in its     Create Share form. A user could inject malicious HTML/JavaScript code that would then be reflected in     the Shares overview. Remote, authenticated, but unprivileged users could exploit this vulnerability to     steal session cookies and escalate their privileges. (CVE-2016-6519)

    Red Hat would like to thank SUSE for reporting this issue. SUSE acknowledges Niklaus Schiess as the     original reporter.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
252833	Linux Distros Unpatched Vulnerability : CVE-2016-6519	Nessus	Misc.	medium
432272	SCA: security update for manila-ui (GHSA-vq76-5ghr-9p4v)	Tenable Cloud Security	SCA Checks	medium
432272	SCA: security update for manila-ui (GHSA-vq76-5ghr-9p4v)	Tenable Self-Hosted Container Security	SCA Checks	medium
210154	RHEL 7 : openstack-manila-ui (RHSA-2016:2116)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2016-6519

medium

Tenable Plugins

medium

medium

medium

medium