Vulnerability · Published Feb 17, 2020 · Assigned by redhat

CVE-2020-1693

High 8.6

In plain English

A high-severity XML external entity in spacewalk from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.3% (higher than 91% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)4.3%top 8.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	spacewalk	All spacewalk versions up 2.9

Weakness: CWE-611 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1693 x_refsource_CONFIRM
https://github.com/spacewalkproject/spacewalk/commit/74e28ec61d916c42061ef4347121650a1c962b0c x_refsource_MISC
https://zeroauth.ltd/blog/2020/02/18/proof-of-concept-exploit-for-cve-2020-1693-spacewalk/ x_refsource_MISC