Riskcovery

CVE-2013-2056

Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass

State
Published
Severity
7.5 High
Published
Jul 31, 2013
Updated
Nov 2, 2026
Reserved
Feb 19, 2013

Read the record on cve.org

Description

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nredhat

Weaknesses

  • CWE-306 Missing Authentication for Critical Functionality

Affected Products

ProductVersions
Red Hat Network Satellite Server v 5.3Red Hat
  • 0:0.5.28-59.3.el5sat and laterNot affected
Red Hat Network Satellite Server v 5.4Red Hat
  • 0:1.2.13-79.el5sat and laterNot affected
Red Hat Network Satellite Server v 5.5Red Hat
  • 0:1.7.38-45.el5sat and laterNot affected
Red Hat Satellite 6Red Hat

    References

    Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.