Every CVE Search/ Get API key

CVE-2019-10137

A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...

8.1 HighFix available

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.12%Up 2.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 8.1

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

Record
CVE-2019-10137
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-22
Updated
2026-11-02
EUVDEUVD-2019-2177 8.1

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

Record
EUVD-2019-2177
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-38jq-w3g8-jpc9 9.8

A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the...

A path traversal flaw was found in spacewalk-proxy, all versions through 2.8, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

Record
GHSA-38jq-w3g8-jpc9
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-22
Updated
2026-11-02
NVD 8.1

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.

Record
CVE-2019-10137
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-22
Updated
2026-11-02
OSVRHSA-2019:1663 8.1

Red Hat Security Advisory: spacewalk-backend and spacewalk-proxy security update

Record
RHSA-2019:1663
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2019:1789-1 No score

Security update for SUSE Manager Server 4.0

This update fixes the following issues:

spacewalk-backend:

  • Do not duplicate 'http://' protocol when using proxies with 'deb' repositories (bsc#1138313)
  • Fix reposync when dealing with RedHat CDN (bsc#1138358)
  • Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480)

spacewalk-web:

  • Change WebUI version 4.0.1

susemanager-doc-indexes:

  • Updated wording for prometheus section
  • Jeos VM update
  • Port 8050 for graphical console display
  • Content life-cycle docs are not enough for customer to understand (bsc#1137955)
  • Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)
  • Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)

susemanager-docs_en:

  • Updated wording for prometheus section
  • Jeos VM update
  • Port 8050 for graphical console display
  • Content life-cycle docs are not enough for customer to understand (bsc#1137955)
  • Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)
  • Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)

susemanager-sync-data:

  • Add channel family definitions for SLES12 SP3 LTSS (bsc#1139693)
  • Add OPENSUSE to allowed channel_families to make openSUSE Leap product visible in the product list (bsc#1138364)
Record
SUSE-SU-2019:1789-1
Updated
2026-11-02
OSVSUSE-SU-2019:1790-1 No score

Security update for SUSE Manager Server 3.2

This update fixes the following issues:

release-notes-susemanager:

  • Fix invalid characters in ncurses mode (bsc#1102770)

spacewalk-backend:

  • Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480)

spacewalk-web:

  • Change WebUI string version to 3.2.9
Record
SUSE-SU-2019:1790-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-backend
Red Hat:network_proxy:5.8::el6
 before 0:2.5.3-177.el6sat
0:2.5.3-177.el6sat
spacewalk-backend-libs
Red Hat:network_proxy:5.8::el6
 before 0:2.5.3-177.el6sat
0:2.5.3-177.el6sat
spacewalk-proxy
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-proxy-broker
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-proxy-common
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-proxy-management
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-proxy-package-manager
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-proxy-redirect
Red Hat:network_proxy:5.8::el6
 before 0:2.5.0-8.el6sat
0:2.5.0-8.el6sat
spacewalk-backend
SUSE:Manager Proxy Module 4.0
From an advisory covering 2 CVEs
 before 4.0.22-3.3.1
4.0.22-3.3.1
spacewalk-proxy
SUSE:Manager Proxy Module 4.0
From an advisory covering 2 CVEs
 before 4.0.12-3.3.1
4.0.12-3.3.1
Show 13 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-web
SUSE:Manager Proxy Module 4.0
From an advisory covering 2 CVEs
 before 4.0.14-3.3.1
4.0.14-3.3.1
spacewalk-backend
SUSE:Manager Server Module 4.0
From an advisory covering 2 CVEs
 before 4.0.22-3.3.1
4.0.22-3.3.1
spacewalk-web
SUSE:Manager Server Module 4.0
From an advisory covering 2 CVEs
 before 4.0.14-3.3.1
4.0.14-3.3.1
susemanager-doc-indexes
SUSE:Manager Server Module 4.0
From an advisory covering 2 CVEs
 before 4.0-10.3.1
4.0-10.3.1
susemanager-docs_en
SUSE:Manager Server Module 4.0
From an advisory covering 2 CVEs
 before 4.0-10.3.1
4.0-10.3.1
susemanager-sync-data
SUSE:Manager Server Module 4.0
From an advisory covering 2 CVEs
 before 4.0.12-3.3.1
4.0.12-3.3.1
release-notes-susemanager-proxy
SUSE:Manager Proxy 3.2
From an advisory covering 2 CVEs
 before 3.2.9-0.16.27.1
3.2.9-0.16.27.1
spacewalk-backend
SUSE:Manager Proxy 3.2
From an advisory covering 2 CVEs
 before 2.8.57.17-3.33.1
2.8.57.17-3.33.1
spacewalk-proxy
SUSE:Manager Proxy 3.2
From an advisory covering 2 CVEs
 before 2.8.5.6-3.11.1
2.8.5.6-3.11.1
spacewalk-web
SUSE:Manager Proxy 3.2
From an advisory covering 2 CVEs
 before 2.8.7.17-3.30.1
2.8.7.17-3.30.1
release-notes-susemanager
SUSE:Manager Server 3.2
From an advisory covering 2 CVEs
 before 3.2.9-6.35.1
3.2.9-6.35.1
spacewalk-backend
SUSE:Manager Server 3.2
From an advisory covering 2 CVEs
 before 2.8.57.17-3.33.1
2.8.57.17-3.33.1
spacewalk-web
SUSE:Manager Server 3.2
From an advisory covering 2 CVEs
 before 2.8.7.17-3.30.1
2.8.7.17-3.30.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-10137 is a high vulnerability (CVSS 8.1) in Redhat Spacewalk, published July 2, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in spacewalk-backend 0:2.5.3-177.el6sat.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open