EUVD-2020-12553

Malware in sbrugna...

CVE-2020-1693

A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute...

PT-2020-2775

Name of the Vulnerable Software and Affected Versions Spacewalk versions up to 2.9 Description A flaw in Spacewalk allows for XML internal entity attacks via the "/rpc/api" endpoint. This could enable an unauthenticated remote attacker to retrieve certain file contents, trigger a denial of servic...

CVE-2020-1693

A flaw was found in Spacewalk where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on t...