7.5Hoch
CVE-2013-2056Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
Beschreibung
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| network satellite | 5.3 | — | |
| network satellite | 5.4 | — | |
| network satellite | 5.5 | — | |
| Red Hat | Red Hat Network Satellite Server v 5.3 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.4 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.5 | all versions | |
| Red Hat | Red Hat Satellite 6 | — | |
| redhat | satellite | 5.3 |
Referenzen und Patches
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
- RHSA-2013:0848 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2013-2056 vdb-entry
CPE-Treffer (NVD) (3)
cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*