1. CVE-Search
  2. CVE-2017-7470
ID CVE-2017-7470
Summary It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:spacewalk:-:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:spacewalk:-:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 12-02-2023 - 23:30)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2017:1259
rpms
  • spacewalk-backend-0:2.0.3-45.el5sat
  • spacewalk-backend-0:2.0.3-45.el6sat
  • spacewalk-backend-0:2.3.3-49.el6sat
  • spacewalk-backend-app-0:2.0.3-45.el5sat
  • spacewalk-backend-app-0:2.0.3-45.el6sat
  • spacewalk-backend-app-0:2.3.3-49.el6sat
  • spacewalk-backend-applet-0:2.0.3-45.el5sat
  • spacewalk-backend-applet-0:2.0.3-45.el6sat
  • spacewalk-backend-applet-0:2.3.3-49.el6sat
  • spacewalk-backend-config-files-0:2.0.3-45.el5sat
  • spacewalk-backend-config-files-0:2.0.3-45.el6sat
  • spacewalk-backend-config-files-0:2.3.3-49.el6sat
  • spacewalk-backend-config-files-common-0:2.0.3-45.el5sat
  • spacewalk-backend-config-files-common-0:2.0.3-45.el6sat
  • spacewalk-backend-config-files-common-0:2.3.3-49.el6sat
  • spacewalk-backend-config-files-tool-0:2.0.3-45.el5sat
  • spacewalk-backend-config-files-tool-0:2.0.3-45.el6sat
  • spacewalk-backend-config-files-tool-0:2.3.3-49.el6sat
  • spacewalk-backend-iss-0:2.0.3-45.el5sat
  • spacewalk-backend-iss-0:2.0.3-45.el6sat
  • spacewalk-backend-iss-0:2.3.3-49.el6sat
  • spacewalk-backend-iss-export-0:2.0.3-45.el5sat
  • spacewalk-backend-iss-export-0:2.0.3-45.el6sat
  • spacewalk-backend-iss-export-0:2.3.3-49.el6sat
  • spacewalk-backend-libs-0:2.0.3-45.el5sat
  • spacewalk-backend-libs-0:2.0.3-45.el6sat
  • spacewalk-backend-libs-0:2.3.3-49.el6sat
  • spacewalk-backend-package-push-server-0:2.0.3-45.el5sat
  • spacewalk-backend-package-push-server-0:2.0.3-45.el6sat
  • spacewalk-backend-package-push-server-0:2.3.3-49.el6sat
  • spacewalk-backend-server-0:2.0.3-45.el5sat
  • spacewalk-backend-server-0:2.0.3-45.el6sat
  • spacewalk-backend-server-0:2.3.3-49.el6sat
  • spacewalk-backend-sql-0:2.0.3-45.el5sat
  • spacewalk-backend-sql-0:2.0.3-45.el6sat
  • spacewalk-backend-sql-0:2.3.3-49.el6sat
  • spacewalk-backend-sql-oracle-0:2.0.3-45.el5sat
  • spacewalk-backend-sql-oracle-0:2.0.3-45.el6sat
  • spacewalk-backend-sql-oracle-0:2.3.3-49.el6sat
  • spacewalk-backend-sql-postgresql-0:2.0.3-45.el5sat
  • spacewalk-backend-sql-postgresql-0:2.0.3-45.el6sat
  • spacewalk-backend-sql-postgresql-0:2.3.3-49.el6sat
  • spacewalk-backend-tools-0:2.0.3-45.el5sat
  • spacewalk-backend-tools-0:2.0.3-45.el6sat
  • spacewalk-backend-xml-export-libs-0:2.0.3-45.el5sat
  • spacewalk-backend-xml-export-libs-0:2.0.3-45.el6sat
  • spacewalk-backend-xml-export-libs-0:2.3.3-49.el6sat
  • spacewalk-backend-xmlrpc-0:2.0.3-45.el5sat
  • spacewalk-backend-xmlrpc-0:2.0.3-45.el6sat
  • spacewalk-backend-xmlrpc-0:2.3.3-49.el6sat
refmap via4
bid 98569
confirm https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470
Last major update 12-02-2023 - 23:30
Published 27-07-2018 - 13:29
Last modified 12-02-2023 - 23:30
Back to Top