CVE-2013-4480

2013-11-1802:55:07

CWE-668

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.5%

JSON

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.

Affected configurations

Nvd

Node

redhatnetwork_satelliteRange≤5.6

redhatsatelliteRange≤5.6

redhatsatellite_with_embedded_oracleMatch5.2

redhatsatellite_with_embedded_oracleMatch5.3

redhatsatellite_with_embedded_oracleMatch5.4

redhatsatellite_with_embedded_oracleMatch5.5

Node

susemanagerMatch1.7

suselinux_enterpriseMatch11.0sp2

VendorProductVersionCPE
redhatnetwork_satellite*cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*
redhatsatellite*cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*
redhatsatellite_with_embedded_oracle5.2cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.2:*:*:*:*:*:*:*
redhatsatellite_with_embedded_oracle5.3cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.3:*:*:*:*:*:*:*
redhatsatellite_with_embedded_oracle5.4cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:*:*:*:*:*:*:*
redhatsatellite_with_embedded_oracle5.5cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.5:*:*:*:*:*:*:*
susemanager1.7cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*
suselinux_enterprise11.0cpe:2.3:o:suse:linux_enterprise:11.0:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	network_satellite	*	cpe:2.3:a:redhat:network_satellite::::::::
redhat	satellite	*	cpe:2.3:a:redhat:satellite::::::::
redhat	satellite_with_embedded_oracle	5.2	cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.2:::::::*
redhat	satellite_with_embedded_oracle	5.3	cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.3:::::::*
redhat	satellite_with_embedded_oracle	5.4	cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.4:::::::*
redhat	satellite_with_embedded_oracle	5.5	cpe:2.3:a:redhat:satellite_with_embedded_oracle:5.5:::::::*
suse	manager	1.7	cpe:2.3:a:suse:manager:1.7:::::::*
suse	linux_enterprise	11.0	cpe:2.3:o:suse:linux_enterprise:11.0:sp2::::::