Lucene search

RedhatCVELIST:CVE-2022-4130

HistoryDec 16, 2022 - 12:00 a.m.

CVE-2022-4130

2022-12-1600:00:00

redhat

www.cve.org

cve-2022-4130

site-to-site request forgery

vulnerability

satellite server

referer header

http request

external interaction

attacker's server

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker’s server by modifying the Referer header in an HTTP request of specific resources in the server.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Satellite Server",
    "versions": [
      {
        "version": "Satellite Server 6.9,6.10,6.11",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2145254