Multiple vulnerabilities in Red Hat Service Interconnect 1.5
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 17 |
| CVE-ID | CVE-2023-5363 CVE-2024-0567 CVE-2024-0553 CVE-2023-46218 CVE-2023-39615 CVE-2023-27043 CVE-2023-7104 CVE-2023-5981 CVE-2021-35939 CVE-2023-39319 CVE-2021-35938 CVE-2021-35937 CVE-2023-39326 CVE-2023-45287 CVE-2023-39322 CVE-2023-39321 CVE-2023-39318 |
| CWE-ID | CWE-310 CWE-617 CWE-208 CWE-200 CWE-125 CWE-20 CWE-59 CWE-79 CWE-367 CWE-400 CWE-203 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Service Interconnect Server applications / Other server solutions |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 17 vulnerabilities.
1) Cryptographic issues
EUVDB-ID: #VU82349
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-5363
CWE-ID:
CWE-310 - Cryptographic Issues
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to an error when processing key and initialisation vector lengths in EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() function. A remote attacker can gain access to potentially sensitive information.
The following ciphers and cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.
Install updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Reachable Assertion
EUVDB-ID: #VU85624
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-0567
CWE-ID:
CWE-617 - Reachable Assertion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a reachable assertion when verifying a certificate chain with a cycle of cross signatures. A remote attacker can pass a specially crafted certificate to the application and perform a denial of service (DoS) attack.
Install updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Information Exposure Through Timing Discrepancy
EUVDB-ID: #VU85623
Risk: Medium
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-0553
CWE-ID:
CWE-208 - Information Exposure Through Timing Discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform timing attack.
The vulnerability exists due to the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. A remote attacker can perform timing sidechannel attack in RSA-PSK key exchange.
Note, the vulnerability exists due to incomplete fox for #VU83316 (CVE-2023-5981).
Install updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Information disclosure
EUVDB-ID: #VU83900
Risk: Low
CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-46218
CWE-ID:
CWE-200 - Exposure of sensitive information to an unauthorized actor
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to an error in curl that allows a malicious HTTP server to set "super cookies" that are then passed back to more origins than what is otherwise allowed or possible. A remote attacker can force curl to send such cookie to different and unrelated sites and domains.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Out-of-bounds read
EUVDB-ID: #VU81044
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39615
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the xmlSAX2StartElement() function in /libxml2/SAX2.c. A remote attacker can pass specially crafted XML input to the application, trigger an out-of-bounds read error and perform a denial of service (DoS) attack.
Install updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Input validation error
EUVDB-ID: #VU82980
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-27043
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass filtration.
The vulnerability exists due to insufficient validation of user-supplied input when parsing email address with a special character. A remote attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Out-of-bounds read
EUVDB-ID: #VU84985
Risk: Medium
CVSSv4.0: 5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-7104
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the sessionReadRecord() function in ext/session/sqlite3session.c when processing a corrupt changeset. A remote user can send a specially crafted request to trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service attack.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Information Exposure Through Timing Discrepancy
EUVDB-ID: #VU83316
Risk: Medium
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-5981
CWE-ID:
CWE-208 - Information Exposure Through Timing Discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform timing attack.
The vulnerability exists due to the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. A remote attacker can perform timing sidechannel attack in RSA-PSK key exchange.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
9) Link following
EUVDB-ID: #VU79523
Risk: Low
CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-35939
CWE-ID:
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Exploit availability: No
DescriptionThe vulnerability allows a local privileged user to escalate privileges on the system.
The vulnerability exist due to fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local privileged user who owns another ancestor directory could potentially use this flaw to gain root privileges.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
10) Cross-site scripting
EUVDB-ID: #VU80573
Risk: Medium
CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39319
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists within the html/template package caused by improperly applied rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. A remote attacker can pass specially crafted input to the application and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
11) Link following
EUVDB-ID: #VU79521
Risk: Low
CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-35938
CWE-ID:
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Exploit availability: No
DescriptionThe vulnerability allows a local privileged user to escalate privileges on the system.
The vulnerability occurs when rpm sets the desired permissions and credentials after installing a file. A local privileged user can use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
12) Time-of-check Time-of-use (TOCTOU) Race Condition
EUVDB-ID: #VU79522
Risk: Low
CVSSv4.0: 4.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-35937
CWE-ID:
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Exploit availability: No
DescriptionThe vulnerability allows a local privileged user to escalate privileges on the system.
The vulnerability exist due to race condition. A local privileged user can bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
13) Resource exhaustion
EUVDB-ID: #VU83928
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39326
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when handling HTTP chunked requests. A remote attacker can send specially crafted HTTP requests to the server and consume excessive memory resources.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
14) Observable discrepancy
EUVDB-ID: #VU86309
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-45287
CWE-ID:
CWE-203 - Observable discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to a timing discrepancy when handling RSA based TLS key exchanges. A remote attacker can perform a Marvin attack and gain access to sensitive information.
Install updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
15) Input validation error
EUVDB-ID: #VU80575
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39322
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in crypto/tls when processing post-handshake message on QUIC connections. A remote attacker can send an incomplete post-handshake message for a QUIC connection and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
16) Input validation error
EUVDB-ID: #VU80574
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39321
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in crypto/tls when processing post-handshake message on QUIC connections. A remote attacker can send an incomplete post-handshake message for a QUIC connection and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
17) Cross-site scripting
EUVDB-ID: #VU80572
Risk: Medium
CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-39318
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data within the html/template package when handling HMTL-like "<!--" and "-->" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. A remote attacker can pass specially crafted input to the application and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
MitigationInstall updates from vendor's website.
Service Interconnect: 1.5.0 - 1.5.2
CPE2.3- cpe:2.3:a:red_hat:service_interconnect:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:service_interconnect:1.5.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2024:1901
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
