CVE-2022-4130

medium

Description

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2145254

Details

Source: Mitre, NVD

Published: 2022-12-16

Updated: 2023-02-06

Risk Information

CVSS v2

Base Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:M/C:N/I:C/A:N

Severity: Medium

CVSS v3

Base Score: 4.5

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Severity: Medium