Unscored severity · published Apr 15, 2014
CVE-2010-2236
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote…
–
CVSS
3.1%
EPSS
No
On KEV
Description
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NP
Network Proxy · Redhat
5.3 · source: NVD
SA
Satellite · Redhat
4.0; 4.1; 4.2; 5.1; 5.2; 5.3 · source: NVD
SP
Spacewalk-java · Redhat
through 2.1.147-1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2236
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2236
Vendor Advisory
http://secunia.com/advisories/56952
bugzilla.redhat.com
https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=607712
Exploit
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f
Exploit
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9
www.suse.com
https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html
More from Network Proxy
4.9
CVE-2012-0059
A flaw was found in Spacewalk-backend