8.6
High
CVE-2020-1693 A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the…
Description
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| spacewalk | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- zeroauth.ltd zeroauth.ltd
Timeline
- Published
- Last modified