CVE-2011-2919

Description

References

• redhat.com/support/errata/RHSA-2011-1299.html · Patch
• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory
• redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html · Vendor Advisory

More vulnerabilities in spacewalk

• CVE-2020-1693CRITICAL 9.8A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthe…
• CVE-2019-10137CRITICAL 9.8A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote,…
• CVE-2019-10136MEDIUM 4.3It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired,…
• CVE-2018-1077HIGH 7.5Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
• CVE-2011-3344MEDIUM 5.4A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by…