« Volver al listado

CVE-2010-2236

Estado: ModificadaMedia (6)—

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Redhat — Network ProxyRedhat — SatelliteRedhat — Spacewalk-java

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2236",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-15T23:55:07.203",
  "references": [
    {
      "url": "http://secunia.com/advisories/56952",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=607712",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/56952",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=607712",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks."
    },
    {
      "lang": "es",
      "value": "La consola de sensores de monitorización  en spacewalk-java anterior a 2.1.148-1 y Red Hat Network (RHN) Satellite 4.0.0 hasta 4.2.0 y 5.1.0 hasta 5.3.0 y Proxy 5.3.0, permite a usuarios remotos autenticados con permisos para administrar  sensores de monitorización ejecutar código arbitrario a través de vectores no especificados, relacionado con backticks."
    }
  ],
  "lastModified": "2026-06-16T23:20:21.543",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:network_proxy:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD54BC7C-AD07-41B7-B2E1-A12361F16BC8"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7342B50-2EB5-4B1D-8B7B-B3EF0CB57344"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78224C92-8BA1-4717-9DE4-4CC74B5E80FA"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E1C5E62-E685-44F0-9AB3-B8C6BDA7E315"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E90E312-ED12-4EBB-AA88-603C91AF2BE9"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CDDEC74-7E97-4498-A136-B270BD1AC72D"
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1FDDB68-9828-4DAF-8417-4E3B68ABA2C5"
            },
            {
              "criteria": "cpe:2.3:a:redhat:spacewalk-java:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF0E732F-CA6D-4AE5-AC20-46DB629B1C95",
              "versionEndIncluding": "2.1.147-1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}