CVE-2019-10136 vulnerability in Red Hat Products
Published on July 2, 2019
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.
Weakness Type
Improper Verification of Cryptographic Signature
The software does not verify, or incorrectly verifies, the cryptographic signature for data.
Products Associated with CVE-2019-10136
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-10136 are published in these products:
Affected Versions
spacewalkproject spacewalk Version spacewalk all through 2.9 is affected by CVE-2019-10136Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.