PT-2019-6953 · Red Hat · Red Hat Update Infrastructure

Publicado 2019-11-04 · Atualizado 2019-11-06 · CVE-2013-4518

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Update Infrastructure version 2.1.3

Description The issue concerns world-readable PKI entitlement certificates in the Red Hat Update Infrastructure.

Recommendations For Red Hat Update Infrastructure version 2.1.3, update the configuration to restrict access to the PKI entitlement certificates to prevent unauthorized reading.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-4518

Produtos afetados

Red Hat Update Infrastructure

Referências · 3

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4518 · Exploit
• 🔥 https://access.redhat.com/security/cve/cve-2013-4518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4518 · Nota de Segurança