description: Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.
problem types: CWE-611
affected:
{
product: spacewalk
vendor: spacewalk
versions:
status: affected, version: 2.6
}