Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
BID:74595
Info
Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
| Bugtraq ID: | 74595 |
| Class: | Design Error |
| CVE: |
CVE-2014-8162 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 29 2015 12:00AM |
| Updated: | Jul 15 2015 12:13AM |
| Credit: | Travis Emmert |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
Red Hat Satellite and Spacewalk are prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.
Red Hat Satellite and Spacewalk are prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.
Exploit / POC
Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Red Hat Satellite and Spacewalk XML External Entity Information Disclosure Vulnerability
References:
References:
- Spacewalk Homepage (Red Hat)