CVE-2011-1594 Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
Remote attackers can redirect users to malicious sites via the url_bounce parameter, enabling phishing attacks and potential credential theft in Spacewalk.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-1594?
CVE-2011-1594 is a medium-severity vulnerability in Red Hat Enterprise Linux 6, published on 5 Feb 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.
Which versions are affected by CVE-2011-1594?
It affects 2 products.
Products include Redhat Network Satellite, Redhat Spacewalk.
How do I fix CVE-2011-1594?
Apply the vendor's patch.
Is CVE-2011-1594 being exploited?
There is no known exploitation of CVE-2011-1594 in the wild and no public exploit code.
Other vulnerabilities in Red Hat Enterprise Linux 6
- CVE-2014-8162 XML external entity in n/a
- CVE-2013-4480 Missing authorization in n/a
- CVE-2013-2143 Missing authorization in n/a
- CVE-2011-2920 Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
- CVE-2011-2927 Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
Sources
Also known as GHSA-v4fr-cg8r-vwm7.