CVE-2012-6137

2013-05-2118:55:01

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

Low

EPSS

0.002

Percentile

59.8%

JSON

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server’s X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.

Affected configurations

Nvd

Node

redhatenterprise_linuxMatch5server

redhatenterprise_linux_desktopMatch5.0client

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_eusMatch5.9.zserver

redhatenterprise_linux_hpc_nodeMatch6

redhatenterprise_linux_long_lifeMatch5.9server

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_server_ausMatch6.4

redhatenterprise_linux_server_eusMatch6.4.z

redhatenterprise_linux_workstationMatch6.0

VendorProductVersionCPE
redhatenterprise_linux5cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*
redhatenterprise_linux_desktop5.0cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client:*:*:*:*:*
redhatenterprise_linux_desktop6.0cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
redhatenterprise_linux_eus5.9.zcpe:2.3:o:redhat:enterprise_linux_eus:5.9.z:*:server:*:*:*:*:*
redhatenterprise_linux_hpc_node6cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*
redhatenterprise_linux_long_life5.9cpe:2.3:o:redhat:enterprise_linux_long_life:5.9:*:server:*:*:*:*:*
redhatenterprise_linux_server6.0cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
redhatenterprise_linux_server_aus6.4cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*
redhatenterprise_linux_server_eus6.4.zcpe:2.3:o:redhat:enterprise_linux_server_eus:6.4.z:*:*:*:*:*:*:*
redhatenterprise_linux_workstation6.0cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	enterprise_linux	5	cpe:2.3:o:redhat:enterprise_linux:5::server:::::
redhat	enterprise_linux_desktop	5.0	cpe:2.3:o:redhat:enterprise_linux_desktop:5.0::client:::::
redhat	enterprise_linux_desktop	6.0	cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
redhat	enterprise_linux_eus	5.9.z	cpe:2.3:o:redhat:enterprise_linux_eus:5.9.z::server:::::
redhat	enterprise_linux_hpc_node	6	cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:::::::*
redhat	enterprise_linux_long_life	5.9	cpe:2.3:o:redhat:enterprise_linux_long_life:5.9::server:::::
redhat	enterprise_linux_server	6.0	cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
redhat	enterprise_linux_server_aus	6.4	cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:::::::*
redhat	enterprise_linux_server_eus	6.4.z	cpe:2.3:o:redhat:enterprise_linux_server_eus:6.4.z:::::::*
redhat	enterprise_linux_workstation	6.0	cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*