PT-2013-5035 · Red Hat · Red Hat Satellite

Andrew Spurrier · Publicado 2013-11-15 · Atualizado 2023-02-13 · CVE-2013-4480

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Satellite versions 5.6 and earlier

Description The issue allows remote attackers to create administrator accounts due to the web interface not being disabled.

Recommendations For Red Hat Satellite versions 5.6 and earlier, disable the web interface used to create the first user for a satellite to prevent the creation of unauthorized administrator accounts.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2013-4480

RHSA-2013:1513

RHSA-2013:1514

Produtos afetados

Red Hat Satellite

Referências · 6

• http://rhn.redhat.com/errata/RHSA-2013-1514.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4480 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2013-1513.html · Aviso do Fabricante
• https://access.redhat.com/site/articles/539283 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00009.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1024614 · Aviso do Fabricante