Bug 610646

Summary:	net-analyzer/nagios-core: Phishing vector & xss (CVE-2016-6209)
Product:	Gentoo Security	Reporter:	Tomáš Mózes <hydrapolic>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Tomáš Mózes 2017-02-23 05:57:54 UTC

http://seclists.org/fulldisclosure/2016/Jun/20

4.3.0 - 2017-02-21
------------------
SECURITY FIXES
* Fix for CVE-2016-6209 - The "corewindow" parameter (as in
  http://localhost/nagios?corewindow=www.somewhere.com) has been disabled by
default. See the UPGRADING document for how to enable it. (John Frickson)

Comment 1 Tomáš Mózes 2017-02-23 05:59:26 UTC


*** This bug has been marked as a duplicate of bug 585914 ***