Medium severity5.4NVD Advisory· Published Feb 5, 2014· Updated Jun 16, 2026

CVE-2011-3344

Description

A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Satellite
cpe:2.3:a:redhat:network_satellite:-:*:*:*:*:*:*:*
Red Hat/Spacewalk
cpe:2.3:a:redhat:spacewalk:1.6:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.redhat.com/support/errata/RHSA-2011-1299.htmlnvdPatchVendor Advisory
bugzilla.redhat.com/show_bug.cginvdVendor Advisory
www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.htmlnvdVendor Advisory
access.redhat.com/security/cve/CVE-2011-3344nvd
git.fedorahosted.org/cgit/spacewalk.git/commit/nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000