CVE-2010-2236

2014-04-1518:00:00

redhat

www.cve.org

AI Score

7.4

Confidence

Low

EPSS

0.017

Percentile

87.7%

JSON

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.

References

secunia.com/advisories/56952

bugzilla.redhat.com/attachment.cgi?id=819987&action=diff

bugzilla.redhat.com/show_bug.cgi?id=607712

git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f

git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9

www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html