Vulnerabilities

TI-2021-17420 CVE-2021-40348 · GHSA-h847-jmmj-x7rc

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection.

MEDIUM 42

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01799 Published 2021-11-01 No fix listed CWE-94

TI-2019-07459 CVE-2019-10136 · GHSA-w2m4-8m7f-6vwv

LOW 21

It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00565 Published 2019-07-02 Fixed CWE-347

TI-2019-07460 CVE-2019-10137 · GHSA-38jq-w3g8-jpc9

MEDIUM 48

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03121 Published 2019-07-02 Fixed CWE-22