Home→Descriptions→SA48829
| Secunia ID | |
| CVE-ID | |
| Release Date |
13 Apr 2012 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Software |
Red Hat Enterprise MRG v2 for Red Hat Enterprise Linux (version 5) |
| Where | |
| Impact |
Cross-Site ScriptingCross-Site Scripting vulnerabilities allow a third party to manipulate the content or behaviour of a web application in a user's browser, without compromising the underlying system. Different Cross-Site Scripting related vulnerabilities are also classified under this category, including "script insertion" and "cross-site request forgery". Cross-Site Scripting vulnerabilities are often used against specific users of a website to steal their credentials or to conduct spoofing attacks. |
| Description |
Red Hat has issued an update for Red Hat Enterprise MRG. This fixes multiple vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks. For more information: |
| Solution |
Updated packages are available via Red Hat Network. |
| Original Advisory |
RHSA-2012:0476-1: RHSA-2012:0477-1: |