What is CVE-2022-4130?

CVE-2022-4130 is a medium-severity vulnerability in Red Hat Satellite. CVSS score: 4.5/10. Published 2022-12-16.

How severe is CVE-2022-4130?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Vulnerability in Red Hat Satellite

CVE-2022-4130

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

EPSS: 0.007 (48.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N.

Affected products

Redhat Satellite — versions 6.9, 6.10, 6.11
N/a Satellite Server — versions Satellite Server 6.9,6.10,6.11

References

secalert@redhat.com (Permissions Required, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2022-4130?: CVE-2022-4130 is a medium-severity vulnerability in Red Hat Satellite. CVSS score: 4.5/10. Published 2022-12-16.
How severe is CVE-2022-4130?: Medium severity. CVSS v3 base score is 4.5 out of 10.