PT-2018-10095 · Red Hat+1 · Spacewalk+1

Kurt Seifried · Publicado 2018-03-14 · Atualizado 2020-04-02 · CVE-2018-1077

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spacewalk version 2.6

Description The issue allows for the disclosure of potentially sensitive information from the server due to an XXE flaw in the API.

Recommendations For Spacewalk version 2.6, update to a version that contains a fix for this issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-1077

SUSE-RU-2020:0671-1

SUSE-SU-2020:0671-1

SUSE-SU-2020:0856-1

Produtos afetados

Spacewalk

Suse

Referências · 72

• https://bugzilla.suse.com/1157317 · Nota
• https://bugzilla.suse.com/1157975 · Nota
• https://bugzilla.suse.com/1164875 · Nota
• https://bugzilla.suse.com/1159023 · Nota
• https://bugzilla.suse.com/1161755 · Nota
• https://bugzilla.suse.com/1153269 · Nota
• https://suse.com/security/cve/CVE-2018-1077 · Nota
• https://bugzilla.suse.com/1165927 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:0856-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1555429 · Nota
• https://bugzilla.suse.com/1140332 · Nota
• https://bugzilla.suse.com/1159012 · Nota
• https://bugzilla.suse.com/1164771 · Nota
• https://bugzilla.suse.com/1085414 · Nota
• https://bugzilla.suse.com/1083326 · Nota