CoreCVE
Back

MEDIUM

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

Published Feb 5, 2014

Description

A flaw was found in Spacewalk, as used in Red Hat Network Satellite. This open redirect vulnerability allows remote attackers to redirect users to arbitrary web sites by manipulating a URL in the url_bounce parameter. This can enable attackers to conduct phishing attacks, potentially leading to unauthorized information disclosure or credential theft.

Affected products

Remediation

Vendor solution

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Metrics

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-601

Open Redirect

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Feb 5, 2014
Updated Apr 2, 2026
Reserved Apr 5, 2011
Link CVE-2011-1594
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2011-1594
Red Hat
Severity Moderate
Public date Feb 5, 2014
Links CVE-2011-1594