CVE-2009-4139

CVSS 3.1: 6.8 medium
EPSS: —
Published: Jul 27, 2011 · Jul 27, 2011
Modified: Oct 30, 2026

Analyze CVE-2009-4139 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.

Vendors: redhat

Products: network satellite server, spacewalk-java

Weakness: CWE-346, CWE-352

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.