Cyber Resilience

CVE-2022-4130

Medium

Published: 16 December 2022

Published
16 December 2022
Modified
14 April 2025
KEV Added
—
Patch
—
CVSS Score v3.1 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
EPSS Score 0.0014 34.1th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-4130 is a medium-severity an unspecified weakness vulnerability in Redhat Satellite. Its CVSS base score is 4.5 (Medium).

Operationally, ranked at the 34.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

redhat
satellite
6.10, 6.11, 6.9

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References