CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-0717 – Spacewalk: Session fixation flaw
https://notcve.org/view.php?id=CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk. Vulnerabilidad de fijación de sesión en Red Hat Network (RHN) Satellite Server v5.4 permite a atacantes remotos secuestrar sesiones web a través de vectores no especificados relacionados con Spacewalk • http://secunia.com/advisories/43487 http://www.redhat.com/support/errata/RHSA-2011-0300.html http://www.securityfocus.com/bid/46528 http://www.securitytracker.com/id?1025116 http://www.vupen.com/english/advisories/2011/0491 https://bugzilla.redhat.com/show_bug.cgi?id=672159 https://exchange.xforce.ibmcloud.com/vulnerabilities/65658 https://access.redhat.com/security/cve/CVE-2011-0717 • CWE-384: Session Fixation •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-0718 – Spacewalk: Prone to brute force password guessing attacks
https://notcve.org/view.php?id=CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks. Red Hat Network (RHN) Satellite Server v5.4 no utiliza un intervalo de tiempo después de un intento de login fallido, lo que facilita a los atacantes remotos realizar ataques de contraseña por fuerza bruta. • http://secunia.com/advisories/43487 http://www.redhat.com/support/errata/RHSA-2011-0300.html http://www.securityfocus.com/bid/46528 http://www.securitytracker.com/id?1025116 http://www.vupen.com/english/advisories/2011/0491 https://bugzilla.redhat.com/show_bug.cgi?id=672159 https://exchange.xforce.ibmcloud.com/vulnerabilities/65657 https://access.redhat.com/security/cve/CVE-2011-0718 https://bugzilla.redhat.com/show_bug.cgi?id=672163 • CWE-287: Improper Authentication •