Vulnerability-Lookup

RHSA-2015:0957

Vulnerability from csaf_redhat - Published: 2015-05-11 17:40 - Updated: 2025-11-21 17:52

Summary

Red Hat Security Advisory: spacewalk-java security update

Severity

Moderate

Notes

Topic: Updated spacewalk packages that fix one security issue are now available for Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details: Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was found that the RPC interface in Satellite would resolve external entities, allowing an attacker to conduct XML External Entity (XXE) attacks. A remote attacker could use this flaw to read files accessible to the user running the Satellite server, and potentially perform other more advanced XXE attacks. (CVE-2014-8162) Red Hat would like to thank Travis Emmert for reporting this issue. All spacewalk users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-8162

It was found that the RPC interface in Satellite would resolve external entities, allowing an attacker to conduct XML External Entity (XXE) attacks. A remote attacker could use this flaw to read files accessible to the user running the Satellite server, and potentially perform other more advanced XXE attacks.

4.3 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-611 - Improper Restriction of XML External Entity Reference

Affected products

Fixed 9 products

Product	Version	Remediation
Unresolved product id: 6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.src	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-java-config-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-java-lib-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.src	—	Vendor Fix fix
Unresolved product id: 6Server-Satellite57:spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch	—	Vendor Fix fix

Threats

Impact Moderate

References

8 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:0957	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1187339	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-8162	self
https://bugzilla.redhat.com/show_bug.cgi?id=1187339	external
https://www.cve.org/CVERecord?id=CVE-2014-8162	external
https://nvd.nist.gov/vuln/detail/CVE-2014-8162	external

Acknowledgments

Travis Emmert

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated spacewalk packages that fix one security issue are now available\nfor Red Hat Satellite 5.7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Satellite is a system management tool for Linux-based\ninfrastructures. It allows for provisioning, monitoring, and remote\nmanagement of multiple Linux deployments with a single, centralized tool.\n\nIt was found that the RPC interface in Satellite would resolve external\nentities, allowing an attacker to conduct XML External Entity (XXE)\nattacks. A remote attacker could use this flaw to read files accessible to\nthe user running the Satellite server, and potentially perform other more\nadvanced XXE attacks. (CVE-2014-8162)\n\nRed Hat would like to thank Travis Emmert for reporting this issue.\n\nAll spacewalk users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:0957",
        "url": "https://access.redhat.com/errata/RHSA-2015:0957"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1187339",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1187339"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0957.json"
      }
    ],
    "title": "Red Hat Security Advisory: spacewalk-java security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:52:26+00:00",
      "generator": {
        "date": "2025-11-21T17:52:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2015:0957",
      "initial_release_date": "2015-05-11T17:40:23+00:00",
      "revision_history": [
        {
          "date": "2015-05-11T17:40:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-05-11T17:40:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:52:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 5.7 (RHEL v.6)",
                "product": {
                  "name": "Red Hat Satellite 5.7 (RHEL v.6)",
                  "product_id": "6Server-Satellite57",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:5.7::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "spacewalk-setup-0:2.3.0-17.el6sat.noarch",
                "product": {
                  "name": "spacewalk-setup-0:2.3.0-17.el6sat.noarch",
                  "product_id": "spacewalk-setup-0:2.3.0-17.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-setup@2.3.0-17.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-java-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-java-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java-config@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java-lib@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-taskomatic@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java-oracle@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
                "product": {
                  "name": "spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
                  "product_id": "spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java-postgresql@2.3.8-103.el6sat?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "spacewalk-setup-0:2.3.0-17.el6sat.src",
                "product": {
                  "name": "spacewalk-setup-0:2.3.0-17.el6sat.src",
                  "product_id": "spacewalk-setup-0:2.3.0-17.el6sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-setup@2.3.0-17.el6sat?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-0:2.3.8-103.el6sat.src",
                "product": {
                  "name": "spacewalk-java-0:2.3.8-103.el6sat.src",
                  "product_id": "spacewalk-java-0:2.3.8-103.el6sat.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/spacewalk-java@2.3.8-103.el6sat?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-java-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-0:2.3.8-103.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.src"
        },
        "product_reference": "spacewalk-java-0:2.3.8-103.el6sat.src",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-config-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-config-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-lib-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-lib-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-setup-0:2.3.0-17.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.noarch"
        },
        "product_reference": "spacewalk-setup-0:2.3.0-17.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-setup-0:2.3.0-17.el6sat.src as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.src"
        },
        "product_reference": "spacewalk-setup-0:2.3.0-17.el6sat.src",
        "relates_to_product_reference": "6Server-Satellite57"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch as a component of Red Hat Satellite 5.7 (RHEL v.6)",
          "product_id": "6Server-Satellite57:spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch"
        },
        "product_reference": "spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch",
        "relates_to_product_reference": "6Server-Satellite57"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Travis Emmert"
          ]
        }
      ],
      "cve": "CVE-2014-8162",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2014-06-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1187339"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the RPC interface in Satellite would resolve external entities, allowing an attacker to conduct XML External Entity (XXE) attacks. A remote attacker could use this flaw to read files accessible to the user running the Satellite server, and potentially perform other more advanced XXE attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Satellite5: RPC API XML External Entities file disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.noarch",
          "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.src",
          "6Server-Satellite57:spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
          "6Server-Satellite57:spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
          "6Server-Satellite57:spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
          "6Server-Satellite57:spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
          "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.noarch",
          "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.src",
          "6Server-Satellite57:spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-8162"
        },
        {
          "category": "external",
          "summary": "RHBZ#1187339",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1187339"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-8162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-8162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-8162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8162"
        }
      ],
      "release_date": "2015-05-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-05-11T17:40:23+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.src",
            "6Server-Satellite57:spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.noarch",
            "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.src",
            "6Server-Satellite57:spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:0957"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-0:2.3.8-103.el6sat.src",
            "6Server-Satellite57:spacewalk-java-config-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-lib-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-oracle-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-java-postgresql-0:2.3.8-103.el6sat.noarch",
            "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.noarch",
            "6Server-Satellite57:spacewalk-setup-0:2.3.0-17.el6sat.src",
            "6Server-Satellite57:spacewalk-taskomatic-0:2.3.8-103.el6sat.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Satellite5: RPC API XML External Entities file disclosure"
    }
  ]
}

CVE-2014-8162 (GCVE-0-2014-8162)

Vulnerability from cvelistv5 – Published: 2015-05-14 14:00 – Updated: 2024-08-06 13:10

Summary

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

3 references

URL	Tags
http://www.securityfocus.com/bid/74595	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-0957.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2015-05-11 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "74595",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74595"
          },
          {
            "name": "RHSA-2015:0957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0957.html"
          },
          {
            "name": "SUSE-SU-2015:0928",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "74595",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74595"
        },
        {
          "name": "RHSA-2015:0957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0957.html"
        },
        {
          "name": "SUSE-SU-2015:0928",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8162",
    "datePublished": "2015-05-14T14:00:00.000Z",
    "dateReserved": "2014-10-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:10:50.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2015:0957

CVE-2014-8162 (GCVE-0-2014-8162)

Tags

Sightings

Nomenclature