7.3
Élevée
CVE-2023-3971 An HTML injection flaw was found in Controller in the user interface settings
Description
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Ansible Automation Platform 2.3 for RHEL 8 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.3 for RHEL 9 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | Versions non publiées |
Références
- RHSA-2023:4340 access.redhat.com
- RHSA-2023:4590 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2226965 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification