Skip to content
OpenAdvisories
Unscored RHSA-2014:0148 4 CVEs

Red Hat Security Advisory: spacewalk-java, spacewalk-web and satellite-branding security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el5 spacewalk-base-minimal 0:2.0.3-19.el5sat
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el5 spacewalk-dobby 0:2.0.3-19.el5sat
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el5 spacewalk-web 0:2.0.3-19.el5sat
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el6 spacewalk-base-minimal 0:2.0.3-19.el6sat
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el6 spacewalk-dobby 0:2.0.3-19.el6sat
Red Hat · Network Satellite Managed Db 5 network_satellite_managed_db:5.6::el6 spacewalk-web 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 satellite-branding 0:5.6.0.23-1.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-base 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-base-minimal 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-base-minimal-config 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-dobby 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-grail 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-html 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-java 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-java-config 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-java-lib 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-java-oracle 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-java-postgresql 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-pxt 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-sniglets 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-taskomatic 0:2.0.2-58.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el5 spacewalk-web 0:2.0.3-19.el5sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 satellite-branding 0:5.6.0.23-1.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-base 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-base-minimal 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-base-minimal-config 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-dobby 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-grail 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-html 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-java 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-java-config 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-java-lib 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-java-oracle 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-java-postgresql 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-pxt 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-sniglets 0:2.0.3-19.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-taskomatic 0:2.0.2-58.el6sat
Red Hat · Network Satellite 5 network_satellite:5.6::el6 spacewalk-web 0:2.0.3-19.el6sat

Vulnerabilities 4

  • Unscored —
    CVE-2012-6149

    Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Sat…

  • Unscored —
    CVE-2013-1869

    CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote a…

  • Unscored —
    CVE-2013-1871

    Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6…

  • Unscored —
    CVE-2013-4415

    Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote a…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=882000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=923464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=923467
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=979452
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0148.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-6149
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-6149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-6149
  • report
    https://access.redhat.com/security/cve/CVE-2013-1869
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1869
  • report
    https://access.redhat.com/security/cve/CVE-2013-1871
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1871
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1871
  • report
    https://access.redhat.com/security/cve/CVE-2013-4415
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4415
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4415