CVE-2009-4139
Red Hat Network Satellite Server v 5.4 · privilege escalation
CVSS 3.1 6.8 MEDIUMCheck source for fixed versionsKEV status unknown
cve-program · CVE-2009-4139
PublishedA flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling user accounts, adding new user accounts, or escalating privileges by modifying existing user accounts to have administrator access.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2009-4139 · CVE overview and exploitation status
cve-program · CVE-2009-4139
- http://securitytracker.com/id?1025674
- http://www.redhat.com/support/errata/RHSA-2011-0879.html
- https://access.redhat.com/errata/RHSA-2011:0879
- https://access.redhat.com/security/cve/CVE-2009-4139
- https://bugzilla.redhat.com/show_bug.cgi?id=529483
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68074
Related changes
Linked by CVE identifier- Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery · Affected-version evidence changed · 5 Nov 2026
- Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery · Affected-version evidence changed · 30 Oct 2026