What’s Vulnerable › Vulnerabilities

CVE-2019-10136

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-02 · updated 2026-06-17
• Weakness: CWE-347

Description

It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.

Affected products

• Red Hat Satellite 6: 5.8
• spacewalkproject spacewalk: through 2.9

References

• http://www.securityfocus.com/bid/109029
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10136
• http://www.securityfocus.com/bid/109029
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10136

Get alerted when CVE-2019-10136 or the next vulnerability affects your stack