CVE-2014-8162
Fixed in a distro release EPSS 3%
XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.
Products: redhat network_satellite, suse manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.7 | spacewalk-java | 0:2.3.8-103.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-config | 0:2.3.8-103.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-lib | 0:2.3.8-103.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-oracle | 0:2.3.8-103.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-postgresql | 0:2.3.8-103.el6sat |
| Red Hat network satellite 5.7 | spacewalk-setup | 0:2.3.0-17.el6sat |
| Red Hat network satellite 5.7 | spacewalk-taskomatic | 0:2.3.8-103.el6sat |