CVE-2013-2056: falha de alta gravidade em Red Hat Network Satellite Server v 5.3
Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 2.6%
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Red Hat · Red Hat Network Satellite Server v 5.3Red Hat · Red Hat Network Satellite Server v 5.4Red Hat · Red Hat Network Satellite Server v 5.5Red Hat · Red Hat Satellite 6CVEs relacionadas — Red Hat Network Satellite Server v 5.3
No mesmo produto, das mais perigosas para as menos.
CVE-2011-2920MEDIUMSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.EPSS 2.0%CVE-2012-0059MEDIUMSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesEPSS 1.7%CVE-2011-3344MEDIUMSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password formEPSS 1.5%CVE-2011-2927MEDIUMSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsEPSS 1.5%CVE-2011-1594MEDIUMSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterEPSS 1.5%CVE-2011-4346MEDIUMSatellite: xss in custom system information key handlingEPSS 1.2%