Spacewalkproject vulnerabilities
2 vulnerabilities
Known vulnerabilities in Spacewalkproject products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Spacewalk1 vulnerabilities
- Spacewalk Proxy1 vulnerabilities
CVE-2019-10136redhatsatellite+56
EPSS score0.57%
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.CVE-2019-10137redhatsatellite+10EPSS score3.12%
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.