CVE-2011-1594

EPSS 0.27%
Published 05.02.2014 18:55:04
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url_bounce parameter.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ Network Satellite Version-

Redhat ≫ Spacewalk Version1.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.27%	0.479

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.redhat.com/support/errata/RHSA-2011-1299.html

Patch

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=672167

Vendor Advisory

https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html

https://nvd.nist.gov/vuln/detail/CVE-2011-1594

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1594

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1594

EUVD