CVE-2013-1869: CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 all...

Security readout for executives and security teams

This flaw affects Spacewalk and Red Hat Network Satellite web handling of a return URL. An attacker could manipulate that parameter to add unintended HTTP headers, enabling response splitting and possible browser-side script execution. Public sources do not provide a CVSS score or active exploitation evidence. Exposure is most likely where Spacewalk or RHN Satellite web interfaces are reachable by untrusted users. Internet-facing or broadly accessible administration portals carry higher risk than isolated management networks. Treat as a targeted management-plane risk. Prioritize systems exposed beyond trusted administrators, because successful abuse could affect browser trust and session-facing web responses in infrastructure management tooling. Mitigation focus: Apply vendor updates referenced by Red Hat or SUSE advisories.; Upgrade spacewalk-java to a fixed version where applicable.; Review vendor guidance for RHN Satellite 5.6 remediation status..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.