Lucene search
Redhat.comRH:CVE-2019-10136HistoryOct 08, 2019 - 11:43 p.m.
CVE-2019-10136
2019-10-0823:43:01
redhat.com
access.redhat.com
19
EPSS
0.001
Percentile
22.7%
It was found that Spacewalk did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.
Related
veracode
veracode
Insecure Signature Validation
2019-07-08 00:07:10
prion
prion
Design/Logic Flaw
2019-07-02 20:15:00
redhat
redhat
(RHSA-2019:1661) Low: spacewalk-backend security update
2019-07-02 13:48:16
cvelist
cvelist
CVE-2019-10136
2019-07-02 19:29:42
nessus
nessus
RHEL 6 : spacewalk-backend (RHSA-2019:1661)
2019-07-08 00:00:00
nvd
nvd
CVE-2019-10136
2019-07-02 20:15:11
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:14163-1)
2021-06-09 00:00:00
cve
cve
CVE-2019-10136
2019-07-02 20:15:11