Red Hat Network Satellite Server vulnerabilities

4 CVEs affecting Red Hat Network Satellite Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-4139, published 2011-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0717, published 2011-02-25. Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days. Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.
CVE-2009-0788, published 2011-04-18. Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days. Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server…
CVE-2011-0718, published 2011-02-25. Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days. Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.
CVE-2009-4139, published 2011-07-27. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to…