A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication process and obtain sensitive channel content. This vulnerability leads to unauthorized information disclosure.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.5 · red hatNVD modified 2026-10-30 16:36
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 5
- http://rhn.redhat.com/errata/RHSA-2013-0848.html
- http://secunia.com/advisories/53487
- http://www.osvdb.org/93566
- https://access.redhat.com/errata/RHSA-2013:0848 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/security/cve/CVE-2013-2056 vdb-entry, x_refsource_redhat