CVE-2013-2056highCWE-306

CVE-2013-2056: high-severity vulnerability in Red Hat Network Satellite Server v 5.3

Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass

Published · Updated

Follow this CVE+ Monitor Red Hat Satellite+ Monitor Red Hat Network Satellite Server v

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.6%
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Red Hat · Red Hat Network Satellite Server v 5.3Red Hat · Red Hat Network Satellite Server v 5.4Red Hat · Red Hat Network Satellite Server v 5.5Red Hat · Red Hat Satellite 6
Related CVEs — Red Hat Network Satellite Server v 5.3

In the same product, most dangerous first.

CVE-2011-2920MEDIUMSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.EPSS 2.0%CVE-2012-0059MEDIUMSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesEPSS 1.7%CVE-2011-3344MEDIUMSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password formEPSS 1.5%CVE-2011-2927MEDIUMSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsEPSS 1.5%CVE-2011-1594MEDIUMSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterEPSS 1.5%CVE-2011-4346MEDIUMSatellite: xss in custom system information key handlingEPSS 1.2%