Vulnerabilities > CVE-2020-1693 - XXE vulnerability in Redhat Spacewalk 1.6/2.6/2.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |