PT-2013-3520

CVE-2013-2056

·

Published

2013-07-31

·

Updated

2022-02-03

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Red Hat Network Satellite versions 5.3 through 5.5
Description The Inter-Satellite Sync operation in Red Hat Network Satellite does not properly check client authenticity, allowing remote attackers to obtain channel content by skipping the initial authentication call.
Recommendations For versions 5.3 through 5.5, consider restricting access to the Inter-Satellite Sync operation until a proper fix is applied, to minimize the risk of unauthorized channel content access.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
RHSA-2013:0848
Found an issue in the description? Have something to add? Feel free to write us 👾