CVE-2010-2236
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.7%
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | network_proxy | 5.3 | cpe:2.3:a:redhat:network_proxy:5.3:*:*:*:*:*:*:* |
| redhat | satellite | 4.0 | cpe:2.3:a:redhat:satellite:4.0:*:*:*:*:*:*:* |
| redhat | satellite | 4.1 | cpe:2.3:a:redhat:satellite:4.1:*:*:*:*:*:*:* |
| redhat | satellite | 4.2 | cpe:2.3:a:redhat:satellite:4.2:*:*:*:*:*:*:* |
| redhat | satellite | 5.1 | cpe:2.3:a:redhat:satellite:5.1:*:*:*:*:*:*:* |
| redhat | satellite | 5.2 | cpe:2.3:a:redhat:satellite:5.2:*:*:*:*:*:*:* |
| redhat | satellite | 5.3 | cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:* |
| redhat | spacewalk-java | * | cpe:2.3:a:redhat:spacewalk-java:*:*:*:*:*:*:*:* |
References
secunia.com/advisories/56952
bugzilla.redhat.com/attachment.cgi?id=819987&action=diff
bugzilla.redhat.com/show_bug.cgi?id=607712
git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f
git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9
www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.7%