VULNERABILITY INTELLIGENCE

CVE-2010-1171

CVSS score5.5 MEDIUM
CISA KEVNot currently listed
Published2011-04-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:P

Description

Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.

Primary references