CVE-2011-2920

概要

参考情報

• redhat.com/support/errata/RHSA-2011-1299.html · Patch
• access.redhat.com/errata/RHSA-2011:1299
• access.redhat.com/security/cve/CVE-2011-2920
• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory
• redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html · Vendor Advisory

spacewalk のその他の脆弱性

• CVE-2020-1693緊急 9.8A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthe…
• CVE-2019-10137緊急 9.8A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote,…
• CVE-2019-10136中 4.3It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired,…
• CVE-2018-1077高 7.5Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
• CVE-2011-3344中 5.4A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by…