CVEvulnerability
CVE-2010-2236
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.
Affected configurations
• redhat network proxy 5.3
• redhat satellite 4.0
• redhat satellite 4.1
• redhat satellite 4.2
• redhat satellite 5.1
• redhat satellite 5.2
• redhat satellite 5.3
• redhat spacewalk-java (<= 2.1.147-1)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/56952 Vendor Advisory
- https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff bugzilla.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=607712 bugzilla.redhat.com
- https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f Exploit, Patch
- https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9 Exploit, Patch
- https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html www.suse.com
- http://secunia.com/advisories/56952 Vendor Advisory
- https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff bugzilla.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=607712 bugzilla.redhat.com
- https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f Exploit, Patch
- https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9 Exploit, Patch
- https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html www.suse.com