Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Network Satellite 5 network_satellite:5.4::el5 | spacewalk-java | 0:1.2.39-85.el5sat |
| Red Hat · Network Satellite 5 network_satellite:5.4::el5 | spacewalk-java-config | 0:1.2.39-85.el5sat |
| Red Hat · Network Satellite 5 network_satellite:5.4::el5 | spacewalk-java-lib | 0:1.2.39-85.el5sat |
| Red Hat · Network Satellite 5 network_satellite:5.4::el5 | spacewalk-java-oracle | 0:1.2.39-85.el5sat |
| Red Hat · Network Satellite 5 network_satellite:5.4::el5 | spacewalk-taskomatic | 0:1.2.39-85.el5sat |
Vulnerabilities 1
-
Medium 6.8
Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding n…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=529483
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0879.json
-
report
https://access.redhat.com/security/cve/CVE-2009-4139
-
advisory
https://www.cve.org/CVERecord?id=CVE-2009-4139
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-4139