7.5Alta
CVE-2013-2056Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
Descripción
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| network satellite | 5.3 | — | |
| network satellite | 5.4 | — | |
| network satellite | 5.5 | — | |
| Red Hat | Red Hat Network Satellite Server v 5.3 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.4 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.5 | all versions | |
| Red Hat | Red Hat Satellite 6 | — | |
| redhat | satellite | 5.3 |
Referencias y parches
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
- RHSA-2013:0848 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2013-2056 vdb-entry
Coincidencias CPE (NVD) (3)
cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*