A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
CVE-2009-4139
CVSS base score
6.8 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-346, CWE-352
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
redhat network satellite server
redhat spacewalk-java
References
- securitytracker.com
- www.redhat.com Patch, Vendor Advisory
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- exchange.xforce.ibmcloud.com
- securitytracker.com
- www.redhat.com Patch, Vendor Advisory
- bugzilla.redhat.com
- exchange.xforce.ibmcloud.com