Every CVE Search/ Get API key

CVE-2011-1594

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

6.5 Medium

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.46%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.5

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Record
CVE-2011-1594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-601
Updated
2026-11-05
EUVDEUVD-2011-1594 6.5

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Record
EUVD-2011-1594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-05
GitHub AdvisoriesGHSA-v4fr-cg8r-vwm7 6.5

Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows...

Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url_bounce parameter.

Record
GHSA-v4fr-cg8r-vwm7
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness
CWE-20, CWE-601
Updated
2026-11-02
NVD 6.5

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Record
CVE-2011-1594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-601, CWE-20
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el5sat
0:1.2.2-7.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-grail
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-html
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-java
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
Show 18 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-pxt
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el5sat
0:1.2.39-98.el5sat
spacewalk-web
Red Hat:network_satellite:5.4::el5
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el5sat
0:1.2.7-20.el5sat
spacewalk-base
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.2-7.el6sat
0:1.2.2-7.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-grail
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-html
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-java
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.39-98.el6sat
0:1.2.39-98.el6sat
spacewalk-web
Red Hat:network_satellite:5.4::el6
From an advisory covering 5 CVEs
 before 0:1.2.7-20.el6sat
0:1.2.7-20.el6sat

History

History
RecordedChangedSources
affected, factsCVE List, NVD
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1594 is a medium vulnerability (CVSS 6.5) in Redhat Network Satellite, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open