Yüksek CVSS 7.5
CVE-2013-2056: Satellite: kritik işlevde kimlik doğrulaması eksik
Açıklama (NVD)
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Özet bilgiler
- Ürün
- Redhat Satellite
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %2,62 (yüzdelik 86)
- CWE
- CWE-306
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-satellite | 5.3 | 5.3 | — |
| redhat-satellite | 5.4 | 5.4 | — |
| redhat-satellite | 5.5 | 5.5 | — |