8.6Alta
CVE-2012-5562Rhn-proxy: rhn-satellite: rhn-proxy: information disclosure via clear-text credential transmission when accessing rhn satellite
Descripción
A flaw was found in rhn-proxy. This vulnerability may allow the rhn-proxy to transmit user credentials in clear-text when it accesses RHN Satellite. This could lead to information disclosure, where sensitive authentication details are exposed to unauthorized parties.
Debilidad (CWE):
CWE-319
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| network proxy | 5.6 | — | |
| Red Hat | Red Hat Satellite Proxy v 5.6 | all versions | |
| redhat | satellite | < 5.6 |
Referencias y parches
- RHEA-2013:1392 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2012-5562 vdb-entryThird Party Advisory
- https://access.redhat.com/security/cve/cve-2012-5562 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5562 Issue TrackingThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*< 5.6