Vulnerabilidades de redhat spacewalk-java (CVE)

Registros CVE publicados para redhat spacewalk-java, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados
6.8Media
CVE-2009-4139

Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

Red Hat Red Hat Network Satellite Server v 5.4; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding n…