PT-2018-8388 · Red Hat+1 · Spacewalk-Channel+1

CVE-2017-7470 · Publicado 2017-05-18 · Atualizado 2023-02-12

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions spacewalk-channel (affected versions not specified)

Description An issue was found in spacewalk-channel where a non-admin user or disabled users can perform administrative tasks due to an incorrect authorization check in the backend/server/rhnChannel.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2017-7470

RHSA-2017:1259

SUSE-SU-2017:1346-1

SUSE-SU-2017:1347-1

SUSE-SU-2017:1349-1

SUSE-SU-2017:1352-1

SUSE-SU-2017_1347-1

Produtos afetados

Suse

Spacewalk-Channel

Referências · 69

• https://bugzilla.suse.com/1017422 · Nota
• https://bugzilla.suse.com/1034465 · Nota
• https://bugzilla.suse.com/1012784 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:1346-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1025275 · Nota
• https://bugzilla.suse.com/1027873 · Nota
• https://bugzilla.suse.com/1017772 · Nota
• https://bugzilla.suse.com/1025758 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:1347-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1013606 · Nota
• https://bugzilla.suse.com/1011964 · Nota
• https://bugzilla.suse.com/1031667 · Nota
• https://bugzilla.suse.com/1026266 · Nota
• https://bugzilla.suse.com/1023233 · Nota
• https://access.redhat.com/errata/RHSA-2017:1259 · Aviso do Fabricante