{"id":"CVE-2017-7470","aliases":["EUVD-2017-16493","GHSA-8hhp-cr56-3gg7","RHSA-2017:1259","SUSE-SU-2017:1346-1","SUSE-SU-2017:1347-1","SUSE-SU-2017:1349-1","SUSE-SU-2017:1352-1"],"status":"published","title":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...","description":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02118,"percentile":0.81979,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2017-05-18T22:18:32Z","modified":"2026-07-01T10:02:19Z","fixes":[{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-app","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-applet","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files-common","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files-tool","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-iss","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-iss-export","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-libs","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-package-push-server","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-server","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql-oracle","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql-postgresql","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-tools","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-xml-export-libs","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-xmlrpc","fixed_in":["0:2.0.3-45.el5sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-app","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-applet","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files-common","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files-tool","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-iss","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-iss-export","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-libs","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-package-push-server","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-server","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql-oracle","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql-postgresql","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-tools","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-xml-export-libs","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-xmlrpc","fixed_in":["0:2.0.3-45.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-app","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-applet","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-common","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-tool","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss-export","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-libs","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-package-push-server","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-server","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-oracle","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-postgresql","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-tools","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xml-export-libs","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xmlrpc","fixed_in":["0:2.3.3-49.el6sat"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"rhnlib","fixed_in":["2.5.84.4-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-backend","fixed_in":["2.5.24.9-22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-certs-tools","fixed_in":["2.5.1.8-17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-client-tools","fixed_in":["2.5.13.8-17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-proxy","fixed_in":["2.5.1.7-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-proxy-installer","fixed_in":["2.5.2.5-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-web","fixed_in":["2.5.7.15-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.0","package":"susemanager-sls","fixed_in":["0.1.20-23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"rhnlib","fixed_in":["2.5.84.4-8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacecmd","fixed_in":["2.5.5.5-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-backend","fixed_in":["2.5.24.9-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-client-tools","fixed_in":["2.5.13.8-23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"rhnlib","fixed_in":["2.5.84.4-8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacecmd","fixed_in":["2.5.5.5-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-backend","fixed_in":["2.5.24.9-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-client-tools","fixed_in":["2.5.13.8-23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"rhnlib","fixed_in":["2.5.84.4-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"salt-netapi-client","fixed_in":["0.11.1-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacecmd","fixed_in":["2.5.5.5-12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-backend","fixed_in":["2.5.24.9-22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-certs-tools","fixed_in":["2.5.1.8-17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-client-tools","fixed_in":["2.5.13.8-17.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-java","fixed_in":["2.5.59.14-23.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-reports","fixed_in":["2.5.1.2-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-setup","fixed_in":["2.5.3.12-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-web","fixed_in":["2.5.7.15-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"subscription-matcher","fixed_in":["0.18-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"susemanager","fixed_in":["3.0.21-21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-schema","fixed_in":["3.0.19-21.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-sls","fixed_in":["0.1.20-23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-sync-data","fixed_in":["3.0.16-24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.0","package":"virtual-host-gatherer","fixed_in":["1.0.13-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"cobbler","fixed_in":["2.6.6-45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"rhnlib","fixed_in":["2.5.84.4-17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","fixed_in":["2.5.5.5-34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-backend","fixed_in":["2.5.24.9-51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-client-tools","fixed_in":["2.5.13.8-48.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-config-files-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-iss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-iss-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-package-push-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-sql-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-xml-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"spacewalk-backend-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el5sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-config-files-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-iss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-iss-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-package-push-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-sql-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-xml-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"spacewalk-backend-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-45.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-config-files-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-iss-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-package-push-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-sql-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xml-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"spacewalk-backend-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-49.el6sat"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.84.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.24.9-22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1.8-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13.8-17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1.7-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-proxy-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2.5-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7.15-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.0","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.20-23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.84.4-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5.5-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.24.9-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13.8-23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.84.4-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5.5-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.24.9-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13.8-23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.84.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"salt-netapi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.1-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5.5-12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.24.9-22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1.8-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13.8-17.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.59.14-23.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-reports","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1.2-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3.12-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7.15-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.21-21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.19-21.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.20-23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.16-24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.0","package":"virtual-host-gatherer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.13-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.84.4-17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5.5-34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.24.9-51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13.8-48.1"}]}]}],"products":[{"vendor":"[unknown]","product":"spacewalk-backend"},{"vendor":"redhat","product":"satellite"},{"vendor":"redhat","product":"spacewalk"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:1259","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/98569","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439622","tags":["report"]},{"url":"https://github.com/advisories/GHSA-8hhp-cr56-3gg7"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1259.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7470","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171346-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1017422","tags":["report"]},{"url":"https://bugzilla.suse.com/1017754","tags":["report"]},{"url":"https://bugzilla.suse.com/1020904","tags":["report"]},{"url":"https://bugzilla.suse.com/1023233","tags":["report"]},{"url":"https://bugzilla.suse.com/1024714","tags":["report"]},{"url":"https://bugzilla.suse.com/1025312","tags":["report"]},{"url":"https://bugzilla.suse.com/1025758","tags":["report"]},{"url":"https://bugzilla.suse.com/1026633","tags":["report"]},{"url":"https://bugzilla.suse.com/1027873","tags":["report"]},{"url":"https://bugzilla.suse.com/1029755","tags":["report"]},{"url":"https://bugzilla.suse.com/1030342","tags":["report"]},{"url":"https://bugzilla.suse.com/1031338","tags":["report"]},{"url":"https://bugzilla.suse.com/1031659","tags":["report"]},{"url":"https://bugzilla.suse.com/1031667","tags":["report"]},{"url":"https://bugzilla.suse.com/1032256","tags":["report"]},{"url":"https://bugzilla.suse.com/1033383","tags":["report"]},{"url":"https://bugzilla.suse.com/1034956","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7470","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171347-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1024406","tags":["report"]},{"url":"https://bugzilla.suse.com/1027426","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171349-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000762","tags":["report"]},{"url":"https://bugzilla.suse.com/1009545","tags":["report"]},{"url":"https://bugzilla.suse.com/1011964","tags":["report"]},{"url":"https://bugzilla.suse.com/1012784","tags":["report"]},{"url":"https://bugzilla.suse.com/1013606","tags":["report"]},{"url":"https://bugzilla.suse.com/1017418","tags":["report"]},{"url":"https://bugzilla.suse.com/1017772","tags":["report"]},{"url":"https://bugzilla.suse.com/1020659","tags":["report"]},{"url":"https://bugzilla.suse.com/1022530","tags":["report"]},{"url":"https://bugzilla.suse.com/1024066","tags":["report"]},{"url":"https://bugzilla.suse.com/1024456","tags":["report"]},{"url":"https://bugzilla.suse.com/1024863","tags":["report"]},{"url":"https://bugzilla.suse.com/1024966","tags":["report"]},{"url":"https://bugzilla.suse.com/1025000","tags":["report"]},{"url":"https://bugzilla.suse.com/1025275","tags":["report"]},{"url":"https://bugzilla.suse.com/1025291","tags":["report"]},{"url":"https://bugzilla.suse.com/1025421","tags":["report"]},{"url":"https://bugzilla.suse.com/1025761","tags":["report"]},{"url":"https://bugzilla.suse.com/1025775","tags":["report"]},{"url":"https://bugzilla.suse.com/1025908","tags":["report"]},{"url":"https://bugzilla.suse.com/1026266","tags":["report"]},{"url":"https://bugzilla.suse.com/1026301","tags":["report"]},{"url":"https://bugzilla.suse.com/1027852","tags":["report"]},{"url":"https://bugzilla.suse.com/1028062","tags":["report"]},{"url":"https://bugzilla.suse.com/1028306","tags":["report"]},{"url":"https://bugzilla.suse.com/1029840","tags":["report"]},{"url":"https://bugzilla.suse.com/1030716","tags":["report"]},{"url":"https://bugzilla.suse.com/1031092","tags":["report"]},{"url":"https://bugzilla.suse.com/1031453","tags":["report"]},{"url":"https://bugzilla.suse.com/1031826","tags":["report"]},{"url":"https://bugzilla.suse.com/1031885","tags":["report"]},{"url":"https://bugzilla.suse.com/1033497","tags":["report"]},{"url":"https://bugzilla.suse.com/1033731","tags":["report"]},{"url":"https://bugzilla.suse.com/1034289","tags":["report"]},{"url":"https://bugzilla.suse.com/1034465","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171352-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1020376","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-7470","description":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","status":"published","published":"2018-07-27T13:00:00Z","modified":"2024-08-05T16:04:11.576Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16493","description":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","status":"published","published":"2018-07-27T13:00:00Z","modified":"2024-08-05T16:04:11Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T02:39:08.461482Z"}],"ghsa":[{"id":"GHSA-8hhp-cr56-3gg7","title":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...","description":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","status":"published","published":"2022-05-13T01:36:20Z","modified":"2023-02-10T05:06:44Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2017-7470","description":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","status":"published","published":"2018-07-27T13:29:00.333Z","modified":"2026-06-17T01:24:24.817Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"RHSA-2017:1259","title":"Red Hat Security Advisory: spacewalk-backend security update","status":"published","published":"2024-09-16T00:19:45Z","modified":"2026-07-01T10:02:19Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"SUSE-SU-2017:1346-1","title":"Security update for SUSE Manager Proxy 3.0","description":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files dir beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Incomplete_package_import: do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -\u003e mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-proxy:\n\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Lower the use-file-instead-of-memory treshold. (bsc#1030342)\n\nspacewalk-proxy-installer:\n\n- Do not start firewall on proxy during configuration if not already active. (bsc#1031338)\n- Salt minions get repodata via a different URL; reflect by additional squid rule. (bsc#1027873)\n- Only warn if parent ssh-push pub key could not be retrieved.\n- Generate and auth ssh push keys for user mgrsshtunnel.\n- Authorize parent salt-ssh key on proxy.\n- Generate proxy ssh-push key and authorize the previous proxy in the chain.\n- Generate own ssh-push key for proxy and authorize parent.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui err handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager proxy.\n2. Stop the proxy service:\nspacewalk-proxy stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\nspacewalk-proxy start\n","status":"published","published":"2017-05-18T22:20:37Z","modified":"2026-02-04T03:26:08.050102Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1347-1","title":"Security update for SUSE Manager Client Tools","description":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nspacecmd:\n\n- Improve output on error for listrepo. (bsc#1027426)\n- Reword spacecmd removal message. (bsc#1024406)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files directory beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store directory mod to 775 and group owner to susemanager.\n- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\n","status":"published","published":"2017-05-18T22:19:15Z","modified":"2025-05-02T04:07:01.589397Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1349-1","title":"Security update for SUSE Manager Server 3.0","description":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nsalt-netapi-client:\n\n- Fix date format for Schedule module. (bsc#1034465)\n\nspacecmd:\n\n- Improve output on error for listrepo. (bsc#1027426)\n- Reword spacecmd removal message. (bsc#1024406)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files directory beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store directory mod to 775 and group owner to susemanager.\n- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -\u003e mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-java:\n\n- Fix missing IPs in Overview tab. (bsc#1031453)\n- Fix scheduling VM deployment in future. (bsc#1034289)\n- Handle empty set to not produce invalid sql. (bsc#1033497)\n- Fix SSM group pagination. (bsc#1012784)\n- Create PooledExecutor with pre-filled queue. (bsc#1030716)\n- Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908)\n- Set action status to 'failed' on uncaught exceptions. (bsc#1013606)\n- Add missing library to taskomatic classpath. (bsc#1024066)\n- Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826)\n- Add a remote command with label as a script to the actionchain. (bsc#1011964)\n- Fix architecture for default channels lookup. (bsc#1025275)\n- Change required salt-netapi-client to \u003e= 0.11.\n- Using stream() during collection processing.\n- Making salt presence timeouts configurable via rhn.conf. (bsc#1025761)\n- Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761)\n- Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761)\n- Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966)\n- Create scap files directories beforehand. (bsc#1029755)\n- Make country, state/province and city searchable for system location. (bsc#1020659)\n- Change incorrect help link. (bsc#1017418)\n- Don't allow scheduling scap scan if openscap pkg missing from minion.\n- Make salt aware of rescheduled actions. (bsc#1027852)\n- Close hibernate session on async salt-ssh call.\n- Use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Add support for salt ssh minions to remote cmd UI.\n- Apply SessionFilter also for error pages. (bsc#1028062)\n- Use correct logging class.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Test errata not removed from origin.\n- Fix merge channels patches. (bsc#1025000)\n- Change XccdfIdent.identifier mapping length to 100.\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Use consistent spelling in UI. (bsc#1028306)\n- Rewording distchannelmap text. (bsc#1017772)\n- Javascript datepicker needs the timezone create a correct date object. (bsc#1024966)\n- Don't show audit tab for ssh-push minions.\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Better error handling and more tests.\n- Store uploaded scap files.\n- Openscap action scheduling and handling.\n- Grant scap capability to minion on registration.\n- Enable audit tab for salt minions.\n- Scap inital xccdfEval and hibernate mappings.\n- Show proxy path in bootstrap UI.\n- AuthFilter tests: Update expectations to reflect cookie update at end of request.\n- AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775)\n- MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291)\n- MinionActionCleanupTest: Expect that list_jobs is only called once.\n- Feat: Allow salt-enabled bootstrap.sh via UI.\n- Catch and display all bootstrap errors.\n- Sync grains and beacons only for regular minions.\n- Add new channel tokens to minion.accessTokens.\n- Fix getting server path for a first level proxy.\n- Fix bootstrap err when proxy not selected.\n- Check if proxy hostname is FQDN not name in UI.\n- Utility for runner to generate ssh key and execute cmd via proxies.\n- Add proxy_pub_key to ssh bootstrap pillar.\n- Add ssh timeout to temporary roster.\n- Salt_ssh_connect_timeout configuration parameter.\n- Authorize parent salt-ssh key on proxy.\n- Java backend for salt ssh-push through proxy.\n- Avoid deadlock with spacewalk-repo-sync. (bsc#1022530)\n- Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840)\n- Keep organization after migrating a system to salt. (bsc#1026301)\n- Fix glob only for noarch rpm(s).\n- Feat: Dynamically detect deployed CA certificate.\n- Fix restore original default (certificate).\n- Rename variable (cert provided by RPM).\n- Fix uniform bootstrap.sh. (bsc#1000762)\n\nspacewalk-reports:\n\n- Remove legacy audit logging reports. (bsc#1009545)\n\nspacewalk-setup:\n\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade.\n- Add xccdf result xslt.\n- Authorize parent salt-ssh key on proxy.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui error handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsubscription-matcher:\n\n- Set -Xmx launch parameter based on customer data. (bsc#1024863) \n- Small bugfixes and logging improvements.\n\nsusemanager:\n\n- Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le.\n- Add python-setuptools to bootstrap repo. (bsc#1033731)\n- Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume\n  utility. (bsc#1031885)\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade\n- Fix typo in comment noting option with-custom-channels. (bsc#1031092)\n- Pre require tomcat and salt.\n- Fix %%pre and %%post scripts in susemanager.spec.\n- Append salt,tomcat,wwwrung to susemanager group.\n- Susemanager group and change owner and permissions for /var/susemanager/systems.\n\nsusemanager-schema:\n\n- Don't fail if capability already exists.\n- Show update message only when updating the schema package. (bsc#1024456)\n- Fix audit log disabling in Oracle.\n- Grant minions scap capability.\n- Clean up stale logging data and triggers. (bsc#1009545)\n- Fix deduplicate to work with more than two duplicates.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nsusemanager-sync-data:\n\n- Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le.\n\nvirtual-host-gatherer:\n\n- Adding support for exploring 'vim.Folder'. (bsc#1025421)\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n","status":"published","published":"2017-05-18T22:20:39Z","modified":"2026-02-04T03:44:06.124282Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1352-1","title":"Security update for SUSE Manager Client Tools","description":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\ncobbler:\n\n- Support UEFI boot with cobbler generated tftp tree. (bsc#1020376)\n- Refresh patch for fuzzless appliance.\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nspacecmd:\n\n- Improve output on error for listrepo. (bsc#1027426)\n- Reword spacecmd removal message. (bsc#1024406)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files directory beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store directory mod to 775 and group owner to susemanager.\n- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n","status":"published","published":"2017-05-18T22:18:32Z","modified":"2026-02-04T03:35:54.935709Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}