Search vulnerabilities

Results 21

Export CSV
CVE-2017-7470

spacewalk-backend: spacewalk-channel can be used by non-admin or disabled users for performing administrative tasks

It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors