Description (CNA)
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| spacewalkproject / spacewalk | affected spacewalk all through 2.9 |
CWE
CWE-347
References
ADP enrichment
No English description supplied.