6.5
Medium
CVE-2017-7470 It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks…
Description
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| spacewalk-backend | Versions not published |