Fix XSS vulnerabilities (CVE-2013-6459).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0336 advisory.

  - rubygem-will_paginate: XSS vulnerabilities (CVE-2013-6459)

  - foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to     that Organization (CVE-2014-8183)

  - V8: integer overflow leading to buffer overflow in Zone::New (CVE-2016-1669)

  - foreman: inspect in a provisioning template exposes sensitive controller information (CVE-2016-3693)

  - pulp: Leakage of CA key in pulp-qpid-ssl-cfg (CVE-2016-3696)

  - pulp: Unsafe use of bash $RANDOM for NSS DB password and seed (CVE-2016-3704)

  - foreman: privilege escalation through Organization and Locations API (CVE-2016-4451)

  - foreman: Information disclosure in provisioning template previews (CVE-2016-4995)

  - foreman: inside discovery-debug, the root password is displayed in plaintext (CVE-2016-4996)

  - foreman: Persistent XSS in Foreman remote execution plugin (CVE-2016-6319)

  - foreman: Foreman information leak through unauthorized multiple_checkboxes helper (CVE-2016-7077)

  - foreman: Information leak through organizations and locations feature (CVE-2016-7078)

  - foreman: Stored XSS vulnerability in remote execution plugin (CVE-2016-8613)

  - foreman: Stored XSS in org/loc wizard (CVE-2016-8634)

  - foreman: Stored XSS via organization/location with HTML in name (CVE-2016-8639)

  - foreman-debug: missing obfuscation of sensitive information (CVE-2016-9593)

  - katello-debug: Possible symlink attacks due to use of predictable file names (CVE-2016-9595)

  - puppet: Unsafe YAML deserialization (CVE-2017-2295)

  - rubygem-hammer_cli: no verification of API server's SSL certificate (CVE-2017-2667)

  - foreman: Image password leak (CVE-2017-2672)

  - Interconnect: Denial of Service vulnerability in Red Hat JBoss AMQ Interconnect (CVE-2017-15699)

  - katello: SQL inject in errata-related REST API (CVE-2018-14623)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
72048	Fedora 19 : rubygem-will_paginate-3.0.4-5.fc19 (2014-0094)	Nessus	Fedora Local Security Checks	1/21/2014	1/11/2021	medium
72047	Fedora 20 : rubygem-will_paginate-3.0.4-5.fc20 (2014-0066)	Nessus	Fedora Local Security Checks	1/21/2014	1/11/2021	medium
107053	RHEL 7 : Satellite 6.3 (RHSA-2018:0336)	Nessus	Red Hat Local Security Checks	2/28/2018	4/27/2024	high

Detections

Analytics

Plugins Search

medium

medium

high