Login Request a demo
Unscored severity · published Feb 25, 2011
CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk
–
CVSS
2%
EPSS
No
On KEV
Description
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Network Satellite Server · Redhat
5.4 · source: NVD
Affected product
NS
Network Satellite Server
Redhat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0717
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0717
Vendor Advisory
http://secunia.com/advisories/43487
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0300.html
www.securityfocus.com
http://www.securityfocus.com/bid/46528
www.securitytracker.com
http://www.securitytracker.com/id?1025116
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0491
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=672159
More from Network Satellite Server
6.8
CVE-2009-4139
A flaw was found in Spacewalk Java site packages
–
CVE-2009-0788
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information…
–
CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password…