spacewalkproject

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

spacewalkproject records in CISA KEV

No spacewalkproject vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2019-07460 CVE-2019-10137 · GHSA-38jq-w3g8-jpc9

MEDIUM 48

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03121 Published 2019-07-02 Fixed CWE-22

TI-2021-17420 CVE-2021-40348 · GHSA-h847-jmmj-x7rc

MEDIUM 42

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01799 Published 2021-11-01 No fix listed CWE-94

TI-2019-07459 CVE-2019-10136 · GHSA-w2m4-8m7f-6vwv

LOW 21

It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00565 Published 2019-07-02 Fixed CWE-347