CVE-2018-1077: XEE
Published Mar 14, 2018
·Updated
It is reported that the Spacewalk 2.6 API contains an XXE flaw resulting in information disclosure.
Other sources
Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
— MITRE
Affected Software
3 affected componentsFixes available
redhat/redstone-xmlrpc 1.1_20071120<20
20
redhat Spacewalk=2.6
redhat Satellite=5.0
Event History
Mar 14, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1077?
The severity of CVE-2018-1077 is high.
2
How does CVE-2018-1077 affect Spacewalk 2.6?
CVE-2018-1077 affects Spacewalk 2.6 by having an XXE flaw in its API, which allows for the disclosure of potentially sensitive information.
3
Is Redhat Spacewalk affected by CVE-2018-1077?
Yes, Redhat Spacewalk version 2.6 is affected by CVE-2018-1077.
4
Is Redhat Satellite affected by CVE-2018-1077?
Yes, Redhat Satellite version 5.0 is affected by CVE-2018-1077.
5
How can I fix CVE-2018-1077?
To fix CVE-2018-1077, update Redstone-XMLRPC to version 1.1_20071120-20 for Spacewalk 2.6 or update to a newer version of Redhat Spacewalk or Redhat Satellite.