CVE-2013-2056

2013-07-3113:20:24

CWE-287

redhat

web.nvd.nist.gov

cve-2013-2056

inter-satellite sync

rhn satellite

remote attack

authentication bypass

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.3%

JSON

The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client “authenticity,” which allows remote attackers to obtain channel content by skipping the initial authentication call.

Affected configurations

Nvd

Node

redhatsatelliteMatch5.3

redhatsatelliteMatch5.4

redhatsatelliteMatch5.5

VendorProductVersionCPE
redhatsatellite5.3cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*
redhatsatellite5.4cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*
redhatsatellite5.5cpe:2.3:a:redhat:satellite:5.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	satellite	5.3	cpe:2.3:a:redhat:satellite:5.3:::::::*
redhat	satellite	5.4	cpe:2.3:a:redhat:satellite:5.4:::::::*
redhat	satellite	5.5	cpe:2.3:a:redhat:satellite:5.5:::::::*