CVE-2019-10136: It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums.

Security readout for executives and security teams

Spacewalk through version 2.9 could accept manipulated expired authentication headers because client token checksums were not computed safely. This may let someone who previously had valid authenticated headers keep limited access longer than intended. The impact is confidentiality-focused and requires prior authenticated material. Exposure is limited to Spacewalk all versions through 2.9. Risk is higher where Spacewalk is reachable by untrusted networks or where expired authenticated headers could be retained. The supplied sources do not identify other products or CPEs. Handle as a moderate priority for organizations still running Spacewalk through 2.9, especially if externally reachable. It is not presented as actively exploited, but it can weaken session expiration and extend unauthorized access from previously valid authenticated material. Mitigation focus: Inventory Spacewalk deployments and identify versions through 2.9.; Check Red Hat or Spacewalk guidance for supported remediation or upgrade direction.; Restrict Spacewalk access to trusted administrative networks where possible..

Prepared

Jun 1, 2026, 14:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.