Lucene search

K
cveRedhatCVE-2017-15136
HistoryFeb 27, 2018 - 9:29 p.m.

CVE-2017-15136

2018-02-2721:29:00
CWE-20
redhat
web.nvd.nist.gov
39
red hat
satellite 6
registration
hostname
security updates
cve-2017-15136
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

4.1

Confidence

High

EPSS

0.001

Percentile

34.2%

When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously registered system will lose access to updates including security updates.

Affected configurations

Nvd
Vulners
Node
redhatsatelliteMatch6.0
VendorProductVersionCPE
redhatsatellite6.0cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Satellite 6",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.0"
      }
    ]
  }
]

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

4.1

Confidence

High

EPSS

0.001

Percentile

34.2%

Related for CVE-2017-15136