7.5Yüksek
CVE-2013-2056Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
Açıklama
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| network satellite | 5.3 | — | |
| network satellite | 5.4 | — | |
| network satellite | 5.5 | — | |
| Red Hat | Red Hat Network Satellite Server v 5.3 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.4 | all versions | |
| Red Hat | Red Hat Network Satellite Server v 5.5 | all versions | |
| Red Hat | Red Hat Satellite 6 | — | |
| redhat | satellite | 5.3 |
Kaynaklar ve yamalar
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
- RHSA-2013:0848 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2013-2056 vdb-entry
CPE eşleşmeleri (NVD) (3)
cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*