CVE-2017-7400

Опубликовано: 03 апр. 2017

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

Ссылки

http://www.securityfocus.com/bid/97324
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1598
https://access.redhat.com/errata/RHSA-2017:1739
https://launchpad.net/bugs/1667086
http://www.securityfocus.com/bid/97324
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1598
https://access.redhat.com/errata/RHSA-2017:1739
https://launchpad.net/bugs/1667086

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:horizon:9.0.0:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.0:b1:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.0:b2:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.0:b3:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.1.0:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:9.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:b1:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:b2:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:b3:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.0:rc3:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openstack:horizon:11.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00223

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-7400

CVSS3: 4.8

ubuntu

почти 9 лет назад

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

CVE-2017-7400

CVSS3: 3.5

redhat

почти 9 лет назад

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

CVE-2017-7400

CVSS3: 4.8

debian

почти 9 лет назад

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 a ...

GHSA-47vp-44v9-rhgq

CVSS3: 4.8

github

больше 3 лет назад

OpenStack Horizon Cross-site Scripting (XSS)

EPSS

Процентиль: 45%

0.00223

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79