Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2009-4139

Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Network Satellite Server Rhel Els and 1 more
CVE-2009-0788

rhn_satellite: Incorrect mod_rewrite rules (information disclosure, abuse as distributed DoS tool)

Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.

CVSS 2.0 · 6.4 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Network Satellite Server
CVE-2011-0717

Spacewalk: Session fixation flaw

Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.

CVSS 2.0 · 5.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Network Satellite Server
CVE-2011-0718

Spacewalk: Prone to brute force password guessing attacks

Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.

CVSS 2.0 · 5.8 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Network Satellite Network Satellite Server