7.5High
CVE-2013-2056Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
Description
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| network satellite | 5.3 | — | |
| network satellite | 5.4 | — | |
| network satellite | 5.5 | — | |
| Red Hat | Red Hat Network Satellite Server v 5.3 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.4 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.5 | all versions | |
| Red Hat | Red Hat Satellite 6 | — | |
| redhat | satellite | 5.3 |
References and patches
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
- RHSA-2013:0848 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2013-2056 vdb-entry
CPE matches (NVD) (3)
cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*