1. CVE-Search
  2. CVE-2011-0717
ID CVE-2011-0717
Summary Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:network_satellite_server:5.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:network_satellite_server:5.4:*:*:*:*:*:*:*
CVSS
Base: 5.8 (as of 13-02-2023 - 01:18)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
redhat via4
advisories
rhsa
id RHSA-2011:0300
rpms
  • spacewalk-backend-0:1.2.13-26.2.el5sat
  • spacewalk-backend-app-0:1.2.13-26.2.el5sat
  • spacewalk-backend-applet-0:1.2.13-26.2.el5sat
  • spacewalk-backend-config-files-0:1.2.13-26.2.el5sat
  • spacewalk-backend-config-files-common-0:1.2.13-26.2.el5sat
  • spacewalk-backend-config-files-tool-0:1.2.13-26.2.el5sat
  • spacewalk-backend-iss-0:1.2.13-26.2.el5sat
  • spacewalk-backend-iss-export-0:1.2.13-26.2.el5sat
  • spacewalk-backend-libs-0:1.2.13-26.2.el5sat
  • spacewalk-backend-package-push-server-0:1.2.13-26.2.el5sat
  • spacewalk-backend-server-0:1.2.13-26.2.el5sat
  • spacewalk-backend-sql-0:1.2.13-26.2.el5sat
  • spacewalk-backend-sql-oracle-0:1.2.13-26.2.el5sat
  • spacewalk-backend-tools-0:1.2.13-26.2.el5sat
  • spacewalk-backend-upload-server-0:1.2.13-26.2.el5sat
  • spacewalk-backend-xml-export-libs-0:1.2.13-26.2.el5sat
  • spacewalk-backend-xmlrpc-0:1.2.13-26.2.el5sat
  • spacewalk-backend-xp-0:1.2.13-26.2.el5sat
  • spacewalk-java-0:1.2.39-35.1.el5sat
  • spacewalk-java-config-0:1.2.39-35.1.el5sat
  • spacewalk-java-lib-0:1.2.39-35.1.el5sat
  • spacewalk-java-oracle-0:1.2.39-35.1.el5sat
  • spacewalk-taskomatic-0:1.2.39-35.1.el5sat
refmap via4
bid 46528
confirm https://bugzilla.redhat.com/show_bug.cgi?id=672159
sectrack 1025116
secunia 43487
vupen ADV-2011-0491
xf rhnss-session-hijacking(65658)
Last major update 13-02-2023 - 01:18
Published 25-02-2011 - 19:00
Last modified 13-02-2023 - 01:18
Back to Top