A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows …
High CVSS 7.5
Summary
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
- https://access.redhat.com/errata/RHSA-2013:0848
- https://access.redhat.com/security/cve/CVE-2013-2056
- http://rhn.redhat.com/errata/RHSA-2013-0848.html Vendor Advisory
- http://secunia.com/advisories/53487 Vendor Advisory
- http://www.osvdb.org/93566
Timeline
- nvd_ingest NVD