8.6
Élevée
CVE-2020-1693 A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the…
Description
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| spacewalk | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- zeroauth.ltd zeroauth.ltd
Chronologie
- Publiée
- Dernière modification