CVE-2011-1594: Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-05 · updated 2026-06-16
Weakness: CWE-601

Description

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Affected products

RedHat Network Satellite: all versions
spacewalkproject spacewalk: 1.6

References

http://www.redhat.com/support/errata/RHSA-2011-1299.html
https://access.redhat.com/security/cve/CVE-2011-1594
https://bugzilla.redhat.com/show_bug.cgi?id=672167
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html
http://www.redhat.com/support/errata/RHSA-2011-1299.html
https://bugzilla.redhat.com/show_bug.cgi?id=672167
https://www.redhat.com/archives/spacewalk-announce-list/2011-December/msg00000.html

Get alerted when CVE-2011-1594 or the next vulnerability affects your stack