A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
CVE-2013-2056
CVSS base score
7.5 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-306, CWE-287
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
redhat satellite
References
- rhn.redhat.com Vendor Advisory
- secunia.com Vendor Advisory
- www.osvdb.org
- access.redhat.com
- access.redhat.com
- rhn.redhat.com Vendor Advisory
- secunia.com Vendor Advisory
- www.osvdb.org