8.6High
CVE-2012-5562Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite
Description
A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Weakness (CWE):
CWE-319
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| network proxy | 5.6 | — | |
| Red Hat | Red Hat Satellite Proxy v 5.6 | all versions | |
| redhat | satellite | < 5.6 |
References and patches
- RHEA-2013:1392 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2012-5562 vdb-entryThird Party Advisory
- https://access.redhat.com/security/cve/cve-2012-5562 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
CPE matches (NVD) (1)
cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*< 5.6