CVE-2019-10136 vulnerability in Red Hat Products
Published on July 2, 2019
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.
Weakness Type
Improper Verification of Cryptographic Signature
The software does not verify, or incorrectly verifies, the cryptographic signature for data.
Products Associated with CVE-2019-10136
stack.watch emails you whenever new vulnerabilities are published in Red Hat Satellite or Red Hat Spacewalk. Just hit a watch button to start following.
Affected Versions
spacewalkproject spacewalk Version spacewalk all through 2.9 is affected by CVE-2019-10136Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.