CVE-2020-1693
Published Feb 17, 2020A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this…
Vendor/product archive
redhat / spacewalk CVEs
Beta · best-effort12 CVEs tagged to redhat / spacewalk — 0 Critical, 3 High, 7 Medium, 2 Low, 0 Unrated.
CVE-2019-10137
Published Jul 2, 2019A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use thi…
CVE-2019-10136
Published Jul 2, 2019It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could mov…
CVE-2017-7470
Published Jul 27, 2018It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhn…
CVE-2018-1077
Published Mar 14, 2018Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
CVE-2014-7812
Published Jan 15, 2015Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via…
CVE-2014-7811
Published Jan 15, 2015Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script o…
CVE-2011-3344
Published Feb 5, 2014A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML…
CVE-2011-2927
Published Feb 5, 2014A flaw was found in Spacewalk and Red Hat Network Satellite. This vulnerability, known as cross-site scripting (XSS), allows remote attackers to inject malicious web scripts or HT…
CVE-2011-2920
Published Feb 5, 2014A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web…
CVE-2011-2919
Published Feb 5, 2014Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the Query…
CVE-2011-1594
Published Feb 5, 2014A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulat…
Showing 1-12 of 12 CVEsPage 1 of 1