Red Hat Security Advisory

RHSA-2013:1514

spacewalk-java security update

Released 2013-11-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Satellite 5.3 (RHEL v.5) spacewalk-java-0.5.44-97.el5sat, spacewalk-java-config-0.5.44-97.el5sat, spacewalk-java-lib-0.5.44-97.el5sat +1
Red Hat Satellite 5.4 (RHEL v.5) spacewalk-java-1.2.39-135.el5sat, spacewalk-java-config-1.2.39-135.el5sat, spacewalk-java-lib-1.2.39-135.el5sat +2
Red Hat Satellite 5.4 (RHEL v.6) spacewalk-java-1.2.39-135.el6sat, spacewalk-java-config-1.2.39-135.el6sat, spacewalk-java-lib-1.2.39-135.el6sat +2
Red Hat Satellite 5.5 (RHEL v.5) spacewalk-java-1.7.54-121.el5sat, spacewalk-java-config-1.7.54-121.el5sat, spacewalk-java-lib-1.7.54-121.el5sat +2
Red Hat Satellite 5.5 (RHEL v.6) spacewalk-java-1.7.54-121.el6sat, spacewalk-java-config-1.7.54-121.el6sat, spacewalk-java-lib-1.7.54-121.el6sat +2
Red Hat Satellite 5.6 (RHEL v.5) spacewalk-java-2.0.2-48.el5sat, spacewalk-java-config-2.0.2-48.el5sat, spacewalk-java-lib-2.0.2-48.el5sat +3
Red Hat Satellite 5.6 (RHEL v.6) spacewalk-java-2.0.2-48.el6sat, spacewalk-java-config-2.0.2-48.el6sat, spacewalk-java-lib-2.0.2-48.el6sat +3

Fixes 1 record

TI-2013-03929 CVE-2013-4480 · GHSA-6g3j-mch3-9577

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to…

LOW 37

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02076 Published 2013-11-15 Fixed CWE-668