CVE-2009-4139CWE-346

Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

Medium · published July 27, 2011

CVSS v3.1
6.8
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00818 · 56.7th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2011-07-27T01:29Z
EPSS history
Timeline
  • 27 JUL 01:29Z
    Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery
    cvelistv5