Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-7470

Fixed in a distro release EPSS 2%CVSS 6.5

It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.

Published 2018-07-27 · CVE record · OSV

Products: redhat spacewalk, redhat satellite

Distro releases

ReleasePackageFixed in
Red Hat network satellite 5.6spacewalk-backend0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-app0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-app0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-applet0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-applet0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-config-files0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-config-files0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-config-files-common0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-config-files-common0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-config-files-tool0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-config-files-tool0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-iss0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-iss0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-iss-export0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-iss-export0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-libs0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-libs0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-package-push-server0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-package-push-server0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-server0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-server0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-sql0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-sql0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-sql-oracle0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-sql-oracle0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-sql-postgresql0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-sql-postgresql0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-tools0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-tools0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-xml-export-libs0:2.0.3-45.el6sat
Red Hat network satellite 5.6spacewalk-backend-xml-export-libs0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-xmlrpc0:2.0.3-45.el5sat
Red Hat network satellite 5.6spacewalk-backend-xmlrpc0:2.0.3-45.el6sat
Red Hat network satellite 5.7spacewalk-backend0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-app0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-applet0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-config-files0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-config-files-common0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-config-files-tool0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-iss0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-iss-export0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-libs0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-package-push-server0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-server0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-sql0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-sql-oracle0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-sql-postgresql0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-tools0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-xml-export-libs0:2.3.3-49.el6sat
Red Hat network satellite 5.7spacewalk-backend-xmlrpc0:2.3.3-49.el6sat
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSrhnlib2.5.84.4-8.1
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSspacecmd2.5.5.5-14.1
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSspacewalk-backend2.5.24.9-24.1
SUSE Linux Enterprise Server 11 SP3-CLIENT-TOOLSspacewalk-client-tools2.5.13.8-23.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLSrhnlib2.5.84.4-8.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLSspacecmd2.5.5.5-14.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLSspacewalk-backend2.5.24.9-24.1
SUSE Linux Enterprise Server 11 SP4-CLIENT-TOOLSspacewalk-client-tools2.5.13.8-23.1
SUSE Manager Client Tools 12cobbler2.6.6-45.1
SUSE Manager Client Tools 12rhnlib2.5.84.4-17.1
SUSE Manager Client Tools 12spacecmd2.5.5.5-34.1
SUSE Manager Client Tools 12spacewalk-backend2.5.24.9-51.1
SUSE Manager Client Tools 12spacewalk-client-tools2.5.13.8-48.1
SUSE Manager Proxy 3.0rhnlib2.5.84.4-6.1
SUSE Manager Proxy 3.0spacewalk-backend2.5.24.9-22.1
SUSE Manager Proxy 3.0spacewalk-certs-tools2.5.1.8-17.1
SUSE Manager Proxy 3.0spacewalk-client-tools2.5.13.8-17.2
SUSE Manager Proxy 3.0spacewalk-proxy2.5.1.7-15.1
SUSE Manager Proxy 3.0spacewalk-proxy-installer2.5.2.5-6.1
SUSE Manager Proxy 3.0spacewalk-web2.5.7.15-21.1
SUSE Manager Proxy 3.0susemanager-sls0.1.20-23.1
SUSE Manager Server 3.0rhnlib2.5.84.4-6.1
SUSE Manager Server 3.0salt-netapi-client0.11.1-12.1
SUSE Manager Server 3.0spacecmd2.5.5.5-12.1
SUSE Manager Server 3.0spacewalk-backend2.5.24.9-22.1
SUSE Manager Server 3.0spacewalk-certs-tools2.5.1.8-17.1
SUSE Manager Server 3.0spacewalk-client-tools2.5.13.8-17.2
SUSE Manager Server 3.0spacewalk-java2.5.59.14-23.2
SUSE Manager Server 3.0spacewalk-reports2.5.1.2-3.1
SUSE Manager Server 3.0spacewalk-setup2.5.3.12-15.1
SUSE Manager Server 3.0spacewalk-web2.5.7.15-21.1
SUSE Manager Server 3.0subscription-matcher0.18-5.1
SUSE Manager Server 3.0susemanager3.0.21-21.1
SUSE Manager Server 3.0susemanager-schema3.0.19-21.2
SUSE Manager Server 3.0susemanager-sls0.1.20-23.1
SUSE Manager Server 3.0susemanager-sync-data3.0.16-24.1
SUSE Manager Server 3.0virtual-host-gatherer1.0.13-6.1