8.6Hoch
CVE-2012-5562Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite
Beschreibung
A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Schwachstellentyp (CWE):
CWE-319
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| network proxy | 5.6 | — | |
| Red Hat | Red Hat Satellite Proxy v 5.6 | all versions | |
| redhat | satellite | < 5.6 |
Referenzen und Patches
- RHEA-2013:1392 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2012-5562 vdb-entryThird Party Advisory
- https://access.redhat.com/security/cve/cve-2012-5562 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*< 5.6