Man-in-the-Middle (MitM)

rhn-migrate-classic-to-rhsm is vulnerable to man-in-the-middle attack. The tool does not verify the server’s X.509 certificate when migrating system profiles to Certificate-based Red Hat Network. This allows an attacker to perform a man-in-the-middle attack on the client and sniff the network traffic to obtain the user’s Red Hat Network credentials.