PT-2013-3520
CVE-2013-2056
·
Published
2013-07-31
·
Updated
2022-02-03
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat Network Satellite versions 5.3 through 5.5
Description
The Inter-Satellite Sync operation in Red Hat Network Satellite does not properly check client
authenticity, allowing remote attackers to obtain channel content by skipping the initial authentication call.Recommendations
For versions 5.3 through 5.5, consider restricting access to the Inter-Satellite Sync operation until a proper fix is applied, to minimize the risk of unauthorized channel content access.
Found an issue in the description? Have something to add? Feel free to write us 👾