PT-2019-6953 · Red Hat · Red Hat Update Infrastructure

Published 2019-11-04 · Updated 2019-11-06 · CVE-2013-4518

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Update Infrastructure version 2.1.3

Description The issue concerns world-readable PKI entitlement certificates in the Red Hat Update Infrastructure.

Recommendations For Red Hat Update Infrastructure version 2.1.3, update the configuration to restrict access to the PKI entitlement certificates to prevent unauthorized reading.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-4518

Affected Products

Red Hat Update Infrastructure

References · 3

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4518 · Exploit
• 🔥 https://access.redhat.com/security/cve/cve-2013-4518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4518 · Security Note