ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
    (CVE-2019-20378)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:4243-1 advisory.

  - ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
    (CVE-2019-20378)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:4244-1 advisory.

  - ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
    (CVE-2019-20378)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3895-1 advisory.

  - ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
    (CVE-2019-20378)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
259207	Linux Distros Unpatched Vulnerability : CVE-2019-20378	Nessus	Misc.	medium
168255	SUSE SLES15 Security Update : ganglia-web (SUSE-SU-2022:4243-1)	Nessus	SuSE Local Security Checks	medium
168253	SUSE SLES15 Security Update : ganglia-web (SUSE-SU-2022:4244-1)	Nessus	SuSE Local Security Checks	medium
167216	SUSE SLES12 Security Update : ganglia-web (SUSE-SU-2022:3895-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2019-20378

medium

Tenable Plugins

medium

medium

medium

medium