Login Request a demo
Medium severity · published Jul 27, 2011
CVE-2009-4139
A flaw was found in Spacewalk Java site packages
6.8
CVSS
0.8%
EPSS
No
On KEV
Description
A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Network Satellite Server · Redhat
5.3.0; 5.4.0; 5.4.1 · source: NVD
SP
Spacewalk-java · Redhat
1.2.39 · source: NVD
Affected product
NS
Network Satellite Server
Redhat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4139
securitytracker.com
http://securitytracker.com/id?1025674
Patch
http://www.redhat.com/support/errata/RHSA-2011-0879.html
access.redhat.com
https://access.redhat.com/security/cve/CVE-2009-4139
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=529483
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/68074
More from Network Satellite Server
–
CVE-2009-0788
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information…
–
CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk
–
CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password…