CVE-2017-7470

Description

It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470

https://access.redhat.com/errata/RHSA-2017:1259

http://www.securityfocus.com/bid/98569

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3