CVE-2010-2236

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-04-15 · updated 2026-06-16
Weakness: CWE-20

Description

The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.

Affected products

RedHat Network Proxy: 5.3
Red Hat Satellite 6: 4.0, 4.1, 4.2, 5.1, 5.2, 5.3
RedHat Spacewalk-Java: through 2.1.147-1

References

http://secunia.com/advisories/56952
https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff
https://bugzilla.redhat.com/show_bug.cgi?id=607712
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9
https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html
http://secunia.com/advisories/56952
https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff
https://bugzilla.redhat.com/show_bug.cgi?id=607712
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f
https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9
https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html

Get alerted when CVE-2010-2236 or the next vulnerability affects your stack