Unauthorized Administrative Access in spacewalk-channel

CVE-2017-7470 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.

Learn more about our Cis Benchmark Audit For Server Software.