CVEvulnerability
CVE-2009-4139
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-346, CWE-352
Description
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
Affected configurations
• redhat network satellite server 5.3.0
• redhat network satellite server 5.4.0
• redhat network satellite server 5.4.1
• redhat spacewalk-java 1.2.39
Related
References
- http://securitytracker.com/id?1025674 securitytracker.com
- http://www.redhat.com/support/errata/RHSA-2011-0879.html Patch, Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2009-4139 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=529483 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68074 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1025674 securitytracker.com
- http://www.redhat.com/support/errata/RHSA-2011-0879.html Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=529483 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68074 exchange.xforce.ibmcloud.com