CVE-2009-4139: redhat network_satellite_server Origin Validation Error
Vulnerability summary
CVE-2009-4139 is a medium (CVSS 6.8) Origin Validation Error vulnerability in redhat network_satellite_server. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.4% of scored vulnerabilities.
Timeline
- 27-07-2011PublishedVulnerability first disclosed.
- 28-04-2026Last modifiedVulnerability information updated.
Description
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.8MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.82%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
0.00 pp
From 0.82% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-346Origin Validation ErrorThe product does not properly verify that the source of data or communication is valid.
- CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Affected systems
Redhat7 products
- network_satellite_server5.3.0 | 5.4.0 | 5.4.1
- spacewalk-java1.2.39
- spacewalk-java< 0:1.2.39-85.el5sat
- spacewalk-java-config< 0:1.2.39-85.el5sat
- spacewalk-java-lib< 0:1.2.39-85.el5sat
1 vendor · 7 products
