Red Hat Security AdvisoryRHSA-2011:1299
Red Hat Network Satellite server security and enhancement update
Released 2011-09-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 5.4 (RHEL v.5) spacewalk-base-1.2.7-20.el5sat, spacewalk-base-minimal-1.2.7-20.el5sat, spacewalk-config-1.2.2-7.el5sat +11
- Red Hat Satellite 5.4 (RHEL v.6) spacewalk-base-1.2.7-20.el6sat, spacewalk-base-minimal-1.2.7-20.el6sat, spacewalk-config-1.2.2-7.el6sat +11
Fixes 5 records
Priority LOW 32
A flaw was found in Spacewalk, as used in Red Hat Network Satellite.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01456 · Published 2014-02-05 · Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-601
Priority LOW 29
A flaw was found in Spacewalk and Red Hat Network Satellite.
CVSS 3.1MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.0204 · Published 2014-02-05 · Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79
Priority LOW 28
A flaw was found in Spacewalk.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.01539 · Published 2014-02-05 · Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79
Priority LOW 27
A flaw was found in Spacewalk and Red Hat Network Satellite.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.01468 · Published 2014-02-05 · Partial fix · 1.2.2-7.el5sat, 1.2.39-98.el5sat +1 CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to inject arbitrary web script or HTML via the QueryString to the SystemGroupList.do page.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01188 · Published 2014-02-05 · Fixed CWE-79