Security Advisory
CVE-2020-1693
8.6
HIGH
Vulnerability Description
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.
Published Date
February 17, 2020
Official Source
NIST NVD Advisory