CVE-2011-1594: redhat network_satellite Open Redirect
Vulnerability summary
CVE-2011-1594 is a medium (CVSS 6.5) Open Redirect vulnerability in redhat network_satellite. EPSS estimates a 1.46% chance of exploitation in the next 30 days, higher than 73% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 05-02-2014PublishedVulnerability first disclosed.
- 02-04-2026Last modifiedVulnerability information updated.
Description
A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS trend
Probability
1.46%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
-0.01 pp
From 1.47% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-601URL Redirection to Untrusted Site ('Open Redirect')The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Redhat2 products
1 vendor · 2 products
References
4 links- bugzilla.redhat.com/show_bug.cgi?id=672167Vendor Advisory