CVE-2009-4139 | BDVDB-2026-46799 Detail
Red HatRed Hat Network Satellite Server v 5.4
Description#
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-346 Origin Validation Error
References#
- http://securitytracker.com/id?1025674
- http://www.redhat.com/support/errata/RHSA-2011-0879.html
- https://access.redhat.com/errata/RHSA-2011:0879
- https://access.redhat.com/security/cve/CVE-2009-4139
- https://bugzilla.redhat.com/show_bug.cgi?id=529483
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68074
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.