PT-2013-3520 · Red Hat · Red Hat Network Satellite

Published 2013-07-31 · Updated 2022-02-03 · CVE-2013-2056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Network Satellite versions 5.3 through 5.5

Description The Inter-Satellite Sync operation in Red Hat Network Satellite does not properly check client authenticity, allowing remote attackers to obtain channel content by skipping the initial authentication call.

Recommendations For versions 5.3 through 5.5, consider restricting access to the Inter-Satellite Sync operation until a proper fix is applied, to minimize the risk of unauthorized channel content access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-2056

RHSA-2013:0848

Affected Products

Red Hat Network Satellite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-2056 · Security Note
• http://secunia.com/advisories/53487 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0848.html · Vendor Advisory
• http://osvdb.org/93566 · Note